{ "apiVersion": "v1", "items": [ { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "ec5f1886ffb977175994e04bfe81a384bcdc3a52c2f8cf21f75b5e19b757b4ce" }, "creationTimestamp": "2026-04-28T12:56:36Z", "generation": 4, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "69d76446bc" }, "name": "klusterlet-agent-69d76446bc", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet-agent", "uid": "15c6bbb9-e181-453d-ab7b-6a41ac7033f9" } ], "resourceVersion": "39067", "uid": "b3f3b304-3a56-4e7a-b5d8-05d471c98d6e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "klusterlet-agent", "pod-template-hash": "69d76446bc" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "69d76446bc" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "agent", "--spoke-cluster-name=clusterpool418-bb45f", "--bootstrap-kubeconfig=/spoke/bootstrap/kubeconfig", "--agent-id=27abf733-a6a9-4714-bcfd-52cffc1109c7", "--workload-source-driver=kube", "--workload-source-config=/spoke/hub-kubeconfig/kubeconfig", "--kube-api-qps=50", "--kube-api-burst=100", "--reserved-cluster-claim-suffixes=openshift.io,open-cluster-management.io" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet-agent", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "2m", "memory": "16Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/spoke/bootstrap", "name": "bootstrap-secret", "readOnly": true }, { "mountPath": "/spoke/hub-kubeconfig", "name": "hub-kubeconfig" }, { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "klusterlet-work-sa", "serviceAccountName": "klusterlet-work-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "bootstrap-secret", "secret": { "defaultMode": 420, "secretName": "bootstrap-hub-kubeconfig" } }, { "emptyDir": { "medium": "Memory" }, "name": "hub-kubeconfig" }, { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "4", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "5774a1ccbedafda4aa2bfa3ce19c4a3b4cd6049149b461bb8b5e1ed1761d8b14" }, "creationTimestamp": "2026-04-28T12:56:39Z", "generation": 3, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "7659c6df7b" }, "name": "klusterlet-agent-7659c6df7b", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet-agent", "uid": "15c6bbb9-e181-453d-ab7b-6a41ac7033f9" } ], "resourceVersion": "45757", "uid": "65e2004c-ae62-49b3-b1c4-7f492146fcaa" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "klusterlet-agent", "pod-template-hash": "7659c6df7b" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet-agent", "open-cluster-management.io/created-by-klusterlet": "klusterlet", "pod-template-hash": "7659c6df7b" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet-agent" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "agent", "--spoke-cluster-name=clusterpool418-bb45f", "--bootstrap-kubeconfig=/spoke/bootstrap/kubeconfig", "--agent-id=27abf733-a6a9-4714-bcfd-52cffc1109c7", "--workload-source-driver=kube", "--workload-source-config=/spoke/hub-kubeconfig/kubeconfig", "--kube-api-qps=50", "--kube-api-burst=100", "--reserved-cluster-claim-suffixes=openshift.io,open-cluster-management.io" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet-agent", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "2m", "memory": "16Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/spoke/bootstrap", "name": "bootstrap-secret", "readOnly": true }, { "mountPath": "/spoke/hub-kubeconfig", "name": "hub-kubeconfig" }, { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "klusterlet-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "klusterlet-work-sa", "serviceAccountName": "klusterlet-work-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "name": "bootstrap-secret", "secret": { "defaultMode": 420, "secretName": "bootstrap-hub-kubeconfig" } }, { "emptyDir": { "medium": "Memory" }, "name": "hub-kubeconfig" }, { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 3, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "6cc56648017f38eb0613ab36c2079636eaa0e4b91ddd37e9c3c1fb8ebe60f8ac" }, "creationTimestamp": "2026-04-28T12:56:26Z", "generation": 2, "labels": { "app": "klusterlet", "pod-template-hash": "bb8dcf8" }, "name": "klusterlet-bb8dcf8", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet", "uid": "4b515451-3d18-4684-811f-90b4a5d41385" } ], "resourceVersion": "38806", "uid": "8da8716a-108e-4f24-9a45-0f29feaaa89d" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "klusterlet", "pod-template-hash": "bb8dcf8" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet", "pod-template-hash": "bb8dcf8" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "klusterlet" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "2Gi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "klusterlet", "serviceAccountName": "klusterlet", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "1c33c4582ce6cacfb66aff03ac8c075e3bc0a56a51e6c5ebc52a4a9d34d41a93" }, "creationTimestamp": "2026-04-28T12:56:39Z", "generation": 1, "labels": { "app": "klusterlet", "pod-template-hash": "cff685879" }, "name": "klusterlet-cff685879", "namespace": "open-cluster-management-agent", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "klusterlet", "uid": "4b515451-3d18-4684-811f-90b4a5d41385" } ], "resourceVersion": "43828", "uid": "ac7fe796-c9d0-4500-8de5-3d6905919f4a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "klusterlet", "pod-template-hash": "cff685879" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "klusterlet", "pod-template-hash": "cff685879" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "failure-domain.beta.kubernetes.io/zone" }, "weight": 70 }, { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "app", "operator": "In", "values": [ "klusterlet" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 30 } ] } }, "containers": [ { "args": [ "/registration-operator", "klusterlet" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "registry.redhat.io/multicluster-engine/registration-operator-rhel9@sha256:38f65ed06100af8f55530fd79ed5064f3839863caec0f610385abeea0e3c1efb", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "klusterlet", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "memory": "2Gi" }, "requests": { "cpu": "50m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "privileged": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpdir" } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "klusterlet-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "klusterlet", "serviceAccountName": "klusterlet", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/infra", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "tmpdir" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:15Z", "generation": 1, "labels": { "app": "openshift-apiserver-operator", "pod-template-hash": "76f99d6f98" }, "name": "openshift-apiserver-operator-76f99d6f98", "namespace": "openshift-apiserver-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-apiserver-operator", "uid": "5976131e-ee6a-4ed3-ae27-649e6a2169be" } ], "resourceVersion": "37090", "uid": "f577e3b2-6df0-4057-a14d-337f84a8d97a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-apiserver-operator", "pod-template-hash": "76f99d6f98" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-apiserver-operator", "pod-template-hash": "76f99d6f98" }, "name": "openshift-apiserver-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-openshift-apiserver-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" }, { "name": "KUBE_APISERVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-apiserver-operator", "serviceAccountName": "openshift-apiserver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-apiserver-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-apiserver-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "5", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "TfbHhg==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "12fe994afc6ef01a5e8255040ea9c4565595b8059d16ff2a28530ae9ea07b784" }, "creationTimestamp": "2026-04-28T11:56:12Z", "generation": 5, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "59cdd4d987", "revision": "1" }, "name": "apiserver-59cdd4d987", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "866b22d2-c4d8-4454-b6ff-8b35e5b253af" } ], "resourceVersion": "25066", "uid": "cacd475e-da2a-4947-b13a-de1000dbda92" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "59cdd4d987" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "5", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "TfbHhg==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "59cdd4d987", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 5, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "7", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "6", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "_PD_6A==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "W9_7LA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "eeb8461e9ee250363e2442b9a38c655200620e81cdc0d50236d18882749ae8c8" }, "creationTimestamp": "2026-04-28T11:58:19Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "6845fbcf75", "revision": "1" }, "name": "apiserver-6845fbcf75", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "866b22d2-c4d8-4454-b6ff-8b35e5b253af" } ], "resourceVersion": "28892", "uid": "7df29199-d622-4e03-948e-0bfbc838872d" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "6845fbcf75" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "6", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "_PD_6A==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "W9_7LA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "6845fbcf75", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "6", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "6", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "_PD_6A==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "4cc50d27dadbf7c761bf2351aa49bcd72b119e4f73080bd252e99496a36eaabb" }, "creationTimestamp": "2026-04-28T11:58:08Z", "generation": 3, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "6948c9bd54", "revision": "1" }, "name": "apiserver-6948c9bd54", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "866b22d2-c4d8-4454-b6ff-8b35e5b253af" } ], "resourceVersion": "20319", "uid": "7e87dfd4-d85b-447d-bfe6-902e997e0a1e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "6948c9bd54" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "6", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "_PD_6A==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "6948c9bd54", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "7VKafQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "cd72be7600b3ce71fb1a1b172b783b14fffeb8d58054a87363f50f43a045ad2d" }, "creationTimestamp": "2026-04-28T11:49:16Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "6b7f94dd7", "revision": "1" }, "name": "apiserver-6b7f94dd7", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "866b22d2-c4d8-4454-b6ff-8b35e5b253af" } ], "resourceVersion": "13144", "uid": "65d0a4db-2386-46e3-91bb-3c4bf0501423" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "6b7f94dd7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "7VKafQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "6b7f94dd7", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "7VKafQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "12eb403d0a0d39b11bcd41c21ca869b84fc95c654793e2f5e0a4d23bc3602453" }, "creationTimestamp": "2026-04-28T11:49:13Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "7857b56486", "revision": "0" }, "name": "apiserver-7857b56486", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "866b22d2-c4d8-4454-b6ff-8b35e5b253af" } ], "resourceVersion": "9334", "uid": "1cf3e87e-6c67-4142-9817-44cca8c70304" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "7857b56486" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "2", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "7VKafQ==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "7857b56486", "revision": "0" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-0" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-0" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "3", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "tr8xQA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "66eca3d9b07b225c4a7b8da8f91a0f448daaf0875f161e873e9e9f799e4d58ec" }, "creationTimestamp": "2026-04-28T11:51:11Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "846d9b9646", "revision": "1" }, "name": "apiserver-846d9b9646", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "866b22d2-c4d8-4454-b6ff-8b35e5b253af" } ], "resourceVersion": "14970", "uid": "90581932-0700-4488-8c81-75ee43f211d3" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "846d9b9646" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "3", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "tr8xQA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "846d9b9646", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "4", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "NjsX6w==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "9add747bbd9ec13d263691d9149307a633727489e14a728da3068b2544f59111" }, "creationTimestamp": "2026-04-28T11:53:12Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "8659b54d97", "revision": "1" }, "name": "apiserver-8659b54d97", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "866b22d2-c4d8-4454-b6ff-8b35e5b253af" } ], "resourceVersion": "22882", "uid": "2ce092e8-3814-4f5c-bf5e-5f0b89f76b3d" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "8659b54d97" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "4", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "NjsX6w==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "OUXnWA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "8659b54d97", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "8", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "P8JYHA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "W9_7LA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "20205959930fdaf27f6e5462dd169c8b44efc156b2191ca39b8eb316be5afe86" }, "creationTimestamp": "2026-04-28T12:05:10Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "8c9b6d4b9", "revision": "1" }, "name": "apiserver-8c9b6d4b9", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "866b22d2-c4d8-4454-b6ff-8b35e5b253af" } ], "resourceVersion": "49429", "uid": "7cdf5120-bd90-4c92-95fb-843272d2f241" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "8c9b6d4b9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "P8JYHA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "W9_7LA==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "8c9b6d4b9", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "10", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "P8JYHA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "tDNGmg==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "NRe5ig==", "operator.openshift.io/spec-hash": "fe1a47276b8faa6b1a885c67a952d366def63b0cada471ec681785c386daa0cc" }, "creationTimestamp": "2026-04-28T12:58:01Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "c9658fc66", "revision": "1" }, "name": "apiserver-c9658fc66", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "866b22d2-c4d8-4454-b6ff-8b35e5b253af" } ], "resourceVersion": "50990", "uid": "44f79f6d-70b7-4d9c-9f07-47fbb70ad853" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "c9658fc66" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "P8JYHA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "tDNGmg==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "NRe5ig==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "c9658fc66", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "9", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4f21a99228482f68869eda77fcbe6a27adc96d1f077b3345974b63738d27943f", "openshiftapiservers.operator.openshift.io/pull-spec": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "P8JYHA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "tDNGmg==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "dcd94f430ce6e24163af9a1f466f142ab8fe9b251f0e9db87bfbfaccbae85118" }, "creationTimestamp": "2026-04-28T12:57:58Z", "generation": 3, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "f96d77d99", "revision": "1" }, "name": "apiserver-f96d77d99", "namespace": "openshift-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "866b22d2-c4d8-4454-b6ff-8b35e5b253af" } ], "resourceVersion": "39850", "uid": "2ac1f8c0-9a39-461d-ac48-2c1123cda9e7" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "pod-template-hash": "f96d77d99" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-desired.generation": "7", "operator.openshift.io/dep-openshift-apiserver.config.configmap": "P8JYHA==", "operator.openshift.io/dep-openshift-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/dep-openshift-apiserver.image-import-ca.configmap": "tDNGmg==", "operator.openshift.io/dep-openshift-apiserver.trusted-ca-bundle.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true", "pod-template-hash": "f96d77d99", "revision": "1" }, "name": "openshift-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-apiserver-a", "openshift-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec openshift-apiserver start --config=/var/run/configmaps/config/config.yaml -v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "openshift-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/kubelet/", "name": "node-pullsecrets", "readOnly": true }, { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/audit", "name": "audit" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/image-import-ca", "name": "image-import-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] }, { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)", "--v", "2" ], "command": [ "cluster-kube-apiserver-operator", "check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "openshift-apiserver-check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/openshift-apiserver \u0026\u0026 touch /var/log/openshift-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/openshift-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7254fd3149e2a140c3579d8b52f6723c5d65be0843abca11502fcc7fa6eaddc9", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/openshift-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-apiserver-sa", "serviceAccountName": "openshift-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/var/lib/kubelet/", "type": "Directory" }, "name": "node-pullsecrets" }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit" }, { "name": "etcd-client", "secret": { "defaultMode": 384, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "configMap": { "defaultMode": 420, "name": "image-import-ca", "optional": true }, "name": "image-import-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 384, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 384, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/openshift-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "authentication-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:17Z", "generation": 1, "labels": { "app": "authentication-operator", "pod-template-hash": "6664695455" }, "name": "authentication-operator-6664695455", "namespace": "openshift-authentication-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "authentication-operator", "uid": "d037476f-7210-436a-8fe7-6d3837efe004" } ], "resourceVersion": "45750", "uid": "0c68b24c-c444-4905-bbe7-9e42fb31f260" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "authentication-operator", "pod-template-hash": "6664695455" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "authentication-operator", "pod-template-hash": "6664695455" }, "name": "authentication-operator" }, "spec": { "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec authentication-operator operator --config=/var/run/configmaps/config/operator-config.yaml --v=2 --terminate-on-files=/var/run/configmaps/trusted-ca-bundle/ca-bundle.crt --terminate-on-files=/tmp/terminate\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "IMAGE_OAUTH_SERVER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4" }, { "name": "IMAGE_OAUTH_APISERVER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_OAUTH_SERVER_IMAGE_VERSION", "value": "4.18.31_openshift" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bf83c9a8597ce1abc7ba9201b47284b03989b10bcc00341d759e97cbe332d0d1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "authentication-operator", "resources": { "requests": { "cpu": "20m", "memory": "200Mi" } }, "securityContext": { "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "authentication-operator", "serviceAccountName": "authentication-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 440, "name": "authentication-operator-config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/rvs-hash": "xMJusDlBI8v5hYOV657AA8kFLaUM7tX4ENOi9VScPNYRHyLFw6AKv4bYSBHh-_7iKv5gTZXOgwIY2D-VNFLExw", "operator.openshift.io/spec-hash": "8016cf56b55612fe529b947b166bcd7f2a0d20d3164cfb7a34b14961383946ac" }, "creationTimestamp": "2026-04-28T12:57:57Z", "generation": 3, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "65c5596b58" }, "name": "oauth-openshift-65c5596b58", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "11092532-7890-46bf-b3d2-64f5e5c34008" } ], "resourceVersion": "39921", "uid": "51143aa2-95bb-480b-a5b7-727fcc38541b" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "65c5596b58" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "xMJusDlBI8v5hYOV657AA8kFLaUM7tX4ENOi9VScPNYRHyLFw6AKv4bYSBHh-_7iKv5gTZXOgwIY2D-VNFLExw", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "65c5596b58" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/rvs-hash": "gEHWrPtDtTRXd3m2V4zlQe80KnVaVkGwZM4N5ixfh2XB4ooqPckG-k3r-ODAvACu7GBElTE1BwK0xodyGYoApg", "operator.openshift.io/spec-hash": "1c49fa90b02773be90a116b9e3f1bb08425cb19f5dbdcd941a97834c21161373" }, "creationTimestamp": "2026-04-28T11:58:27Z", "generation": 4, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "6db6dfdd56" }, "name": "oauth-openshift-6db6dfdd56", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "11092532-7890-46bf-b3d2-64f5e5c34008" } ], "resourceVersion": "23875", "uid": "351f52a2-5b8f-43d2-b2ca-f2ee936a43b0" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "6db6dfdd56" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "gEHWrPtDtTRXd3m2V4zlQe80KnVaVkGwZM4N5ixfh2XB4ooqPckG-k3r-ODAvACu7GBElTE1BwK0xodyGYoApg", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "6db6dfdd56" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/rvs-hash": "xTG_0c54SIQc6z-RVEc_cn4V-OB_cqm1GKXIDYlakZ97MzxExAsNSL6Z7IIiY-XE95AH_xwdd8fRNx4liC_eJQ", "operator.openshift.io/spec-hash": "d7482d027f10f348f9fafe8eea87664ef9058729d4343eccc2fa9336e6945012" }, "creationTimestamp": "2026-04-28T11:58:38Z", "generation": 7, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "6f878ff6b" }, "name": "oauth-openshift-6f878ff6b", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "11092532-7890-46bf-b3d2-64f5e5c34008" } ], "resourceVersion": "46977", "uid": "0871c5e7-6b1c-4ec1-9bae-7b236cc896af" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "6f878ff6b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "xTG_0c54SIQc6z-RVEc_cn4V-OB_cqm1GKXIDYlakZ97MzxExAsNSL6Z7IIiY-XE95AH_xwdd8fRNx4liC_eJQ", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "6f878ff6b" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/rvs-hash": "vfXaN_TkbBfXLEEgfXDvgWM_8jk7PJi0DYhS3npdI7jDLSJwuZoD0qazaJ9FUkAUf4tEbkLwUKNr4yw9h6-xJQ", "operator.openshift.io/spec-hash": "6779c18a0ab2384aa57a6f8ee2ef9f279d3a036d823de581d9b30f8f408807da" }, "creationTimestamp": "2026-04-28T12:58:02Z", "generation": 4, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "77559ddc46" }, "name": "oauth-openshift-77559ddc46", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "11092532-7890-46bf-b3d2-64f5e5c34008" } ], "resourceVersion": "48049", "uid": "ad4ed152-cd5e-4f81-818b-9bd13c3ea7ff" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "77559ddc46" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "vfXaN_TkbBfXLEEgfXDvgWM_8jk7PJi0DYhS3npdI7jDLSJwuZoD0qazaJ9FUkAUf4tEbkLwUKNr4yw9h6-xJQ", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "77559ddc46" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/rvs-hash": "dsJnr3kCDCyz_zZqRn564EuafMnRWC4t5LTF6tWyszfud748RMoW0tq0Mbq0P3wjyJ6TH9dNJfyjhvpt3kWAlw", "operator.openshift.io/spec-hash": "94893ac962b7c1eedb983d1a82ebdb5202eb6ea034f8768d4a6f67275a59fdf1" }, "creationTimestamp": "2026-04-28T11:58:33Z", "generation": 3, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "786f5c6ff" }, "name": "oauth-openshift-786f5c6ff", "namespace": "openshift-authentication", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "oauth-openshift", "uid": "11092532-7890-46bf-b3d2-64f5e5c34008" } ], "resourceVersion": "21782", "uid": "6f29e3f6-4759-46a2-9329-4e892aa45890" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "oauth-openshift", "pod-template-hash": "786f5c6ff" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/bootstrap-user-exists": "true", "operator.openshift.io/rvs-hash": "dsJnr3kCDCyz_zZqRn564EuafMnRWC4t5LTF6tWyszfud748RMoW0tq0Mbq0P3wjyJ6TH9dNJfyjhvpt3kWAlw", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true", "pod-template-hash": "786f5c6ff" }, "name": "oauth-openshift", "namespace": "openshift-authentication" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "oauth-openshift", "oauth-openshift-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle/ca-bundle.crt /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-server osinserver \\\n--config=/var/config/system/configmaps/v4-0-config-system-cliconfig/v4-0-config-system-cliconfig \\\n--v=2 \\\n--audit-log-format=json \\\n--audit-log-maxbackup=10 \\\n--audit-log-maxsize=100 \\\n--audit-log-path=/var/log/oauth-server/audit.log \\\n--audit-policy-file=/var/run/configmaps/audit/audit.yaml\n" ], "command": [ "/bin/bash", "-ec" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a1d4f164f6fed79471e7ba24f8bdd3b1c7faead44281c2dc1fa59d6ee78198b4", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "oauth-openshift", "ports": [ { "containerPort": 6443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "readOnlyRootFilesystem": false, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/log/oauth-server", "name": "audit-dir" }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-session", "name": "v4-0-config-system-session", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-cliconfig", "name": "v4-0-config-system-cliconfig", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-serving-cert", "name": "v4-0-config-system-serving-cert", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-service-ca", "name": "v4-0-config-system-service-ca", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-router-certs", "name": "v4-0-config-system-router-certs", "readOnly": true }, { "mountPath": "/var/config/system/secrets/v4-0-config-system-ocp-branding-template", "name": "v4-0-config-system-ocp-branding-template", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-login", "name": "v4-0-config-user-template-login", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-provider-selection", "name": "v4-0-config-user-template-provider-selection", "readOnly": true }, { "mountPath": "/var/config/user/template/secret/v4-0-config-user-template-error", "name": "v4-0-config-user-template-error", "readOnly": true }, { "mountPath": "/var/config/system/configmaps/v4-0-config-system-trusted-ca-bundle", "name": "v4-0-config-system-trusted-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-openshift", "serviceAccountName": "oauth-openshift", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit" }, "name": "audit-policies" }, { "hostPath": { "path": "/var/log/oauth-server", "type": "" }, "name": "audit-dir" }, { "name": "v4-0-config-system-session", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-session" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-cliconfig" }, "name": "v4-0-config-system-cliconfig" }, { "name": "v4-0-config-system-serving-cert", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-service-ca" }, "name": "v4-0-config-system-service-ca" }, { "name": "v4-0-config-system-router-certs", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-router-certs" } }, { "name": "v4-0-config-system-ocp-branding-template", "secret": { "defaultMode": 420, "secretName": "v4-0-config-system-ocp-branding-template" } }, { "name": "v4-0-config-user-template-login", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-login" } }, { "name": "v4-0-config-user-template-provider-selection", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-provider-selection" } }, { "name": "v4-0-config-user-template-error", "secret": { "defaultMode": 420, "optional": true, "secretName": "v4-0-config-user-template-error" } }, { "configMap": { "defaultMode": 420, "name": "v4-0-config-system-trusted-ca-bundle", "optional": true }, "name": "v4-0-config-system-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/default-logs-container": "manager", "operator.openshift.io/spec-hash": "dd92ea8f553b313ae21755645fa4b0d2fd605823015d9d4f5b232669d38fee20" }, "creationTimestamp": "2026-04-28T11:49:18Z", "generation": 1, "labels": { "control-plane": "catalogd-controller-manager", "pod-template-hash": "77cf86c58c" }, "name": "catalogd-controller-manager-77cf86c58c", "namespace": "openshift-catalogd", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "catalogd-controller-manager", "uid": "4942747f-c80f-4196-a75c-1c6c0d0f5dd8" } ], "resourceVersion": "47347", "uid": "df43fb3a-a029-491d-93ee-924fb1119110" }, "spec": { "minReadySeconds": 5, "replicas": 1, "selector": { "matchLabels": { "control-plane": "catalogd-controller-manager", "pod-template-hash": "77cf86c58c" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "control-plane": "catalogd-controller-manager", "pod-template-hash": "77cf86c58c" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64", "arm64", "ppc64le", "s390x" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:7443", "--http2-disable", "--upstream=http://127.0.0.1:8080/", "--logtostderr=true", "--v=2" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 7443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "5m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--leader-elect", "--metrics-bind-address=127.0.0.1:8080", "--external-address=catalogd-service.openshift-catalogd.svc", "--tls-cert=/var/certs/tls.crt", "--tls-key=/var/certs/tls.key", "--v=2", "--global-pull-secret=openshift-config/pull-secret" ], "command": [ "./manager" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/ca-certs" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9bdb5a41b2201109f610b40ca5791cdb118b061f322dee9682d4343a57a6cded", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cache/", "name": "cache" }, { "mountPath": "/var/certs", "name": "catalogserver-certs" }, { "mountPath": "/var/ca-certs", "name": "ca-certs", "readOnly": true }, { "mountPath": "/etc/containers", "name": "etc-containers", "readOnly": true }, { "mountPath": "/etc/docker", "name": "etc-docker", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seLinuxOptions": { "type": "spc_t" }, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "catalogd-controller-manager", "serviceAccountName": "catalogd-controller-manager", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "cache" }, { "name": "catalogserver-certs", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "optional": false, "secretName": "catalogserver-cert" } }, { "name": "ca-certs", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "catalogd-trusted-ca-bundle", "optional": false } }, { "configMap": { "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "openshift-service-ca.crt", "optional": false } } ] } }, { "hostPath": { "path": "/etc/containers", "type": "Directory" }, "name": "etc-containers" }, { "hostPath": { "path": "/etc/docker", "type": "Directory" }, "name": "etc-docker" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "2", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:47:44Z", "generation": 1, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "5f99b65568" }, "name": "cluster-cloud-controller-manager-operator-5f99b65568", "namespace": "openshift-cloud-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-cloud-controller-manager-operator", "uid": "e98964e1-9621-4e5d-a598-0fbfb883fee2" } ], "resourceVersion": "11052", "uid": "0ae28f87-2ff1-4a7e-874b-99cd4f5cc16a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "5f99b65568" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-cloud-controller-manager", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "5f99b65568" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /cluster-controller-manager-operator \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n\"--images-json=/etc/cloud-controller-manager-config/images.json\" \\\n--metrics-bind-address=127.0.0.1:9257 \\\n--health-addr=127.0.0.1:9259\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:76cbfb8bdd89e148fd7784868570466a611431baf4fd76e83e9c5cbdc4ed1487", "imagePullPolicy": "IfNotPresent", "name": "cluster-cloud-controller-manager", "ports": [ { "containerPort": 9257, "hostPort": 9257, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9259, "hostPort": 9259, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cloud-controller-manager-config/", "name": "images" }, { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /config-sync-controllers \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n--health-addr=127.0.0.1:9260\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:76cbfb8bdd89e148fd7784868570466a611431baf4fd76e83e9c5cbdc4ed1487", "imagePullPolicy": "IfNotPresent", "name": "config-sync-controllers", "ports": [ { "containerPort": 9260, "hostPort": 9260, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "25Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9258", "--upstream=http://127.0.0.1:9257/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9258, "hostPort": 9258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "cloud-controller-manager-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-cloud-controller-manager", "serviceAccountName": "cluster-cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "value": "true" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "cloud-controller-manager-images" }, "name": "images" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "cloud-controller-manager-operator-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "cloud-controller-manager-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CloudControllerManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:47:20Z", "generation": 2, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "649d966895" }, "name": "cluster-cloud-controller-manager-operator-649d966895", "namespace": "openshift-cloud-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-cloud-controller-manager-operator", "uid": "e98964e1-9621-4e5d-a598-0fbfb883fee2" } ], "resourceVersion": "3257", "uid": "3fdcbb16-0c14-41fb-b3aa-9c0e35ac2609" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "649d966895" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-cloud-controller-manager", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cloud-manager-operator", "pod-template-hash": "649d966895" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /cluster-controller-manager-operator \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n\"--images-json=/etc/cloud-controller-manager-config/images.json\" \\\n--metrics-bind-address=127.0.0.1:9257 \\\n--health-addr=127.0.0.1:9259\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:76cbfb8bdd89e148fd7784868570466a611431baf4fd76e83e9c5cbdc4ed1487", "imagePullPolicy": "IfNotPresent", "name": "cluster-cloud-controller-manager", "ports": [ { "containerPort": 9257, "name": "metrics", "protocol": "TCP" }, { "containerPort": 9259, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cloud-controller-manager-config/", "name": "images" }, { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n URL_ONLY_KUBECONFIG=/etc/kubernetes/kubeconfig\nfi\nexec /config-sync-controllers \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager-operator \\\n--health-addr=127.0.0.1:9260\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:76cbfb8bdd89e148fd7784868570466a611431baf4fd76e83e9c5cbdc4ed1487", "imagePullPolicy": "IfNotPresent", "name": "config-sync-controllers", "ports": [ { "containerPort": 9260, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "25Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9258", "--upstream=http://127.0.0.1:9257/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "cloud-controller-manager-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-cloud-controller-manager", "serviceAccountName": "cluster-cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "value": "true" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "cloud-controller-manager-images" }, "name": "images" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "cloud-controller-manager-operator-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "cloud-controller-manager-operator-tls" } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/generation": "2", "operator.openshift.io/spec-hash": "6b45fa5741f655f0f0dcfaf688491e1756d130fe26c2316eb94945ed1816ab9b" }, "creationTimestamp": "2026-04-28T12:57:57Z", "generation": 1, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "5f58ff4d74" }, "name": "aws-cloud-controller-manager-5f58ff4d74", "namespace": "openshift-cloud-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-cloud-controller-manager", "uid": "df29efae-9b03-4ffc-970b-31f8cffb036f" } ], "resourceVersion": "39725", "uid": "38af5b80-9ca7-4e20-8dd0-df458b350c48" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "5f58ff4d74" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/config-hash": "1b185e0166ed3480a1261bfd972d41b469cba880cfcd5ef6a3c1706af91e99c1", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "5f58ff4d74" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nfi\nexec /bin/aws-cloud-controller-manager \\\n--cloud-provider=aws \\\n--use-service-account-credentials=true \\\n--configure-cloud-routes=false \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager \\\n--secure-port=0 \\\n-v=2\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4a11ab47c0580b964612bb36e52d6feb852d2355f5e71ba41f357dd2b1664527", "imagePullPolicy": "IfNotPresent", "name": "cloud-controller-manager", "ports": [ { "containerPort": 10258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "200m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cloud-controller-manager", "serviceAccountName": "cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "ccm-trusted-ca" }, "name": "trusted-ca" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/generation": "1", "operator.openshift.io/spec-hash": "59c1111ac0b0aac2c84e79a3389fb353c6a4715217817223e715c1be75b60e5e" }, "creationTimestamp": "2026-04-28T11:47:23Z", "generation": 2, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "767d45f7df" }, "name": "aws-cloud-controller-manager-767d45f7df", "namespace": "openshift-cloud-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-cloud-controller-manager", "uid": "df29efae-9b03-4ffc-970b-31f8cffb036f" } ], "resourceVersion": "39500", "uid": "3e7ad874-4be8-4c92-a2e5-b5ef9739711c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "767d45f7df" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/config-hash": "ed60604515fd43bb97396f9ba6f6244dbfe66db355bff404c7323b94cbe56d76", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager", "pod-template-hash": "767d45f7df" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "infrastructure.openshift.io/cloud-controller-manager": "AWS", "k8s-app": "aws-cloud-controller-manager" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nfi\nexec /bin/aws-cloud-controller-manager \\\n--cloud-provider=aws \\\n--use-service-account-credentials=true \\\n--configure-cloud-routes=false \\\n--leader-elect=true \\\n--leader-elect-lease-duration=137s \\\n--leader-elect-renew-deadline=107s \\\n--leader-elect-retry-period=26s \\\n--leader-elect-resource-namespace=openshift-cloud-controller-manager \\\n--secure-port=0 \\\n-v=2\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4a11ab47c0580b964612bb36e52d6feb852d2355f5e71ba41f357dd2b1664527", "imagePullPolicy": "IfNotPresent", "name": "cloud-controller-manager", "ports": [ { "containerPort": 10258, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "200m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cloud-controller-manager", "serviceAccountName": "cloud-controller-manager", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node.cloudprovider.kubernetes.io/uninitialized", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "ccm-trusted-ca" }, "name": "trusted-ca" }, { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CloudCredential", "config.openshift.io/inject-proxy": "cloud-credential-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T11:47:16Z", "generation": 1, "labels": { "app": "cloud-credential-operator", "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0", "pod-template-hash": "7b9d544bd7" }, "name": "cloud-credential-operator-7b9d544bd7", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cloud-credential-operator", "uid": "d7ea6cc3-ee50-4f02-950a-848f5dfe5a73" } ], "resourceVersion": "40841", "uid": "44b7f955-cc53-4f83-a5b3-38f27b545133" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0", "pod-template-hash": "7b9d544bd7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cloud-credential-operator", "control-plane": "controller-manager", "controller-tools.k8s.io": "1.0", "pod-template-hash": "7b9d544bd7" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:2112/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cloud-credential-operator-serving-cert" } ] }, { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec /usr/bin/cloud-credential-operator operator\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "AZURE_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b7a0bab79b738287a2f1ed51b12f250596b499b9e906855437ed6e2f43128de3" }, { "name": "AWS_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ea11e812ada7fac3f1ab0f035ae5d3d48621949359a9e1b432fd9048b1100db4" }, { "name": "GCP_POD_IDENTITY_WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6ebfa08dddfc6a1e3d681760c1181ae8268bed6740661d2f8c942aa4adb6d4d6" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:331f2a6c07838109e6846ce1a50d1ad7423fe1ba0bef1ec9fd7811af88e1b75b", "imagePullPolicy": "IfNotPresent", "name": "cloud-credential-operator", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "cco-trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cloud-credential-operator", "serviceAccountName": "cloud-credential-operator", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "cco-trusted-ca", "optional": true }, "name": "cco-trusted-ca" }, { "name": "cloud-credential-operator-serving-cert", "secret": { "defaultMode": 420, "secretName": "cloud-credential-operator-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "c9d3ff6bf29e905d11f322d925a4c1e7403667660c69361bc94bd09711549b28" }, "creationTimestamp": "2026-04-28T11:58:24Z", "generation": 1, "labels": { "app": "pod-identity-webhook", "pod-template-hash": "f5f945775" }, "name": "pod-identity-webhook-f5f945775", "namespace": "openshift-cloud-credential-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pod-identity-webhook", "uid": "612f2c85-e470-468c-a13a-4c2cff0180de" } ], "resourceVersion": "36826", "uid": "64873287-ceb9-4959-9b05-a3afd3180cd7" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "pod-identity-webhook", "pod-template-hash": "f5f945775" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "pod-identity-webhook", "pod-template-hash": "f5f945775" } }, "spec": { "containers": [ { "command": [ "/usr/bin/aws-pod-identity-webhook", "--aws-default-region=us-east-1", "--in-cluster=false", "--tls-cert=/var/run/app/certs/tls.crt", "--tls-key=/var/run/app/certs/tls.key", "--namespace=openshift-cloud-credential-operator", "--port=9443", "--service-name=pod-identity-webhook", "--annotation-prefix=eks.amazonaws.com", "--token-audience=sts.amazonaws.com", "--logtostderr" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ea11e812ada7fac3f1ab0f035ae5d3d48621949359a9e1b432fd9048b1100db4", "imagePullPolicy": "IfNotPresent", "name": "pod-identity-webhook", "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/app/certs", "name": "webhook-certs" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pod-identity-webhook", "serviceAccountName": "pod-identity-webhook", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "pod-identity-webhook" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the cloud network config controller which manages cloud-level network configurations\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:47:43Z", "generation": 1, "labels": { "app": "cloud-network-config-controller", "component": "network", "openshift.io/component": "network", "pod-template-hash": "f98469f9c", "type": "infra" }, "name": "cloud-network-config-controller-f98469f9c", "namespace": "openshift-cloud-network-config-controller", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cloud-network-config-controller", "uid": "0bdf4326-06c4-4037-9293-fe10dbe03737" } ], "resourceVersion": "36876", "uid": "56846f59-d4df-4be1-9378-fe80131c36eb" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "cloud-network-config-controller", "pod-template-hash": "f98469f9c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cloud-network-config-controller", "component": "network", "openshift.io/component": "network", "pod-template-hash": "f98469f9c", "type": "infra" }, "name": "cloud-network-config-controller" }, "spec": { "containers": [ { "args": [ "-platform-type", "AWS", "-platform-region=us-east-1", "-platform-api-url=", "-platform-aws-ca-override=", "-platform-azure-environment=", "-secret-name", "cloud-credentials" ], "command": [ "/usr/bin/cloud-network-config-controller" ], "env": [ { "name": "CONTROLLER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CONTROLLER_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c6e80c4f355cd8176864cf3efa93b57846e94578073fe846385761eb0929385d", "imagePullPolicy": "IfNotPresent", "name": "controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secret/cloudprovider", "name": "cloud-provider-secret", "readOnly": true }, { "mountPath": "/kube-cloud-config", "name": "kube-cloud-config", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cloud-network-config-controller", "serviceAccountName": "cloud-network-config-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "cloud-provider-secret", "secret": { "defaultMode": 420, "secretName": "cloud-credentials" } }, { "configMap": { "defaultMode": 420, "name": "kube-cloud-config" }, "name": "kube-cloud-config" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "rR2odw==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "7BxuGA==", "operator.openshift.io/spec-hash": "4070c2b745395399a2fb1ac931aa343f3cd16003b62ad68647f56ad377d8a027" }, "creationTimestamp": "2026-04-28T11:49:09Z", "generation": 5, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "58f97c9bd5" }, "name": "aws-ebs-csi-driver-controller-58f97c9bd5", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "50cbd05a-63e2-4508-969d-cd878eaecfb7" } ], "resourceVersion": "40562", "uid": "eb736227-74c0-4161-b4c8-fe612e538446" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "58f97c9bd5" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "rR2odw==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "7BxuGA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "58f97c9bd5" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool418-bb45f-xt782", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "non-standard-root-system-trust-ca-bundle", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "aws-ebs-csi-driver-trusted-ca-bundle" }, "name": "non-standard-root-system-trust-ca-bundle" } ] } } }, "status": { "observedGeneration": 5, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "rR2odw==", "operator.openshift.io/spec-hash": "b0304a2ba36648e30295439afaa745b04beba18e47f7c01563f1abee10f54dea" }, "creationTimestamp": "2026-04-28T11:49:04Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "5db4d749ff" }, "name": "aws-ebs-csi-driver-controller-5db4d749ff", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "50cbd05a-63e2-4508-969d-cd878eaecfb7" } ], "resourceVersion": "6220", "uid": "0bc694c6-5dea-4ac8-aab1-c7453ec072d7" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "5db4d749ff" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "rR2odw==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "5db4d749ff" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool418-bb45f-xt782", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "rR2odw==", "operator.openshift.io/spec-hash": "c1739b33696ec1e77caffe20aed4066f7a1e07905d60c0fa7fa75e95806b5581" }, "creationTimestamp": "2026-04-28T11:49:04Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "76859f54f9" }, "name": "aws-ebs-csi-driver-controller-76859f54f9", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "50cbd05a-63e2-4508-969d-cd878eaecfb7" } ], "resourceVersion": "6553", "uid": "606e1056-4db3-414b-9673-ef33f2b93848" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "76859f54f9" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "rR2odw==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "76859f54f9" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool418-bb45f-xt782", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=${TLS_CIPHER_SUITES}", "--tls-min-version=${TLS_MIN_VERSION}", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "rR2odw==", "operator.openshift.io/spec-hash": "155dc53e25144689dcd715a93dd5179cc0f669b05c75697b1c78f283fb18ebf5" }, "creationTimestamp": "2026-04-28T11:49:07Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "7f98f5d9df" }, "name": "aws-ebs-csi-driver-controller-7f98f5d9df", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "50cbd05a-63e2-4508-969d-cd878eaecfb7" } ], "resourceVersion": "7948", "uid": "a098aaf5-aede-42f2-8afc-bcceb2567aa7" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "7f98f5d9df" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "b3aTLg==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "rR2odw==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "7f98f5d9df" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool418-bb45f-xt782", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "non-standard-root-system-trust-ca-bundle", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "aws-ebs-csi-driver-trusted-ca-bundle" }, "name": "non-standard-root-system-trust-ca-bundle" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "csi-driver", "config.openshift.io/inject-proxy-cabundle": "csi-driver", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "NRe5ig==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "rR2odw==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "7BxuGA==", "operator.openshift.io/spec-hash": "703dc49706cd04b0d3a5d2ff22ce08b6020fc847653be8b08750a2bded249930" }, "creationTimestamp": "2026-04-28T12:58:06Z", "generation": 3, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "844c67d68b" }, "name": "aws-ebs-csi-driver-controller-844c67d68b", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-controller", "uid": "50cbd05a-63e2-4508-969d-cd878eaecfb7" } ], "resourceVersion": "40766", "uid": "6a3dee3d-04e6-44fb-b9d7-0dd208afea5a" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "844c67d68b" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "aws-auth,aws-keys,bound-sa-token,socket-dir", "openshift.io/required-scc": "restricted-v2", "operator.openshift.io/dep-5d02b1dbbfd3b1124537c2229e410cd2adfa2": "NRe5ig==", "operator.openshift.io/dep-6540db51e1e1cd661ff9b38e0f79d39119207": "rR2odw==", "operator.openshift.io/dep-b5233af8ffad2a3df77758ca90fc5d97e8259": "7BxuGA==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "aws-ebs-csi-driver-controller", "pod-template-hash": "844c67d68b" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "aws-ebs-csi-driver-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "controller", "--endpoint=$(CSI_ENDPOINT)", "--k8s-tag-cluster-id=clusterpool418-bb45f-xt782", "--logtostderr", "--http-endpoint=localhost:8201", "--v=2", "--batching=true" ], "env": [ { "name": "CSI_ENDPOINT", "value": "unix:///var/lib/csi/sockets/pluginproxy/csi.sock" }, { "name": "AWS_SDK_LOAD_CONFIG", "value": "1" }, { "name": "AWS_CONFIG_FILE", "value": "/var/run/aws/auth/credentials" }, { "name": "AWS_REGION", "value": "us-east-1" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 5, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 3 }, "name": "csi-driver", "ports": [ { "containerPort": 10301, "name": "healthz", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "non-standard-root-system-trust-ca-bundle", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9201", "--upstream=http://127.0.0.1:8201/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-8201", "ports": [ { "containerPort": 9201, "name": "driver-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8202", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--default-fstype=ext4", "--feature-gates=Topology=true", "--extra-create-metadata=true", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e", "imagePullPolicy": "IfNotPresent", "name": "csi-provisioner", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9202", "--upstream=http://127.0.0.1:8202/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "provisioner-kube-rbac-proxy", "ports": [ { "containerPort": 9202, "name": "provisioner-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8203", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9", "imagePullPolicy": "IfNotPresent", "name": "csi-attacher", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9203", "--upstream=http://127.0.0.1:8203/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "attacher-kube-rbac-proxy", "ports": [ { "containerPort": 9203, "name": "attacher-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--http-endpoint=localhost:8204", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--timeout=60s", "--kube-api-qps=20", "--kube-api-burst=100", "--workers=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088", "imagePullPolicy": "IfNotPresent", "name": "csi-resizer", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9204", "--upstream=http://127.0.0.1:8204/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "resizer-kube-rbac-proxy", "ports": [ { "containerPort": 9204, "name": "resizer-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/var/lib/csi/sockets/pluginproxy/csi.sock", "--metrics-address=localhost:8205", "--leader-election", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-csi-drivers", "--v=2", "--extra-create-metadata", "--kube-api-qps=20", "--kube-api-burst=100", "--worker-threads=100" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshotter", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/csi/sockets/pluginproxy/", "name": "socket-dir" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9205", "--upstream=http://127.0.0.1:8205/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "snapshotter-kube-rbac-proxy", "ports": [ { "containerPort": 9205, "name": "snapshotter-m", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-serving-cert" } ] }, { "args": [ "--csi-address=/csi/csi.sock", "--health-port=10301", "--v=2", "--probe-timeout=3s" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da", "imagePullPolicy": "IfNotPresent", "name": "csi-liveness-probe", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/csi", "name": "socket-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "# Define file path variables\nCREDENTIALS_FILE=/var/run/aws/keys/credentials\nAUTH_CREDENTIALS_FILE=/var/run/aws/auth/credentials\nAWS_ACCESS_KEY_ID_FILE=/var/run/aws/keys/aws_access_key_id\nAWS_SECRET_ACCESS_KEY_FILE=/var/run/aws/keys/aws_secret_access_key\n\n# If credentials key exists in ebs-cloud-credentials secret, then use it as the auth file\nif [ -e \"$CREDENTIALS_FILE\" ]; then\n cp \"$CREDENTIALS_FILE\" \"$AUTH_CREDENTIALS_FILE\"\n echo \"Kubernetes Secret already contains credentials file, copied to the right place: $AUTH_CREDENTIALS_FILE\"\n exit 0\nfi\n\n# Otherwise, make sure the access keys are mounted in the pod...\nif [ ! -e \"$AWS_ACCESS_KEY_ID_FILE\" ] || [ ! -e \"$AWS_SECRET_ACCESS_KEY_FILE\" ]; then\n echo \"AWS keys not found\"\n exit 1\nfi\n\n# And create an auth file based on those keys\ncat \u003c\u003c-EOF \u003e \"$AUTH_CREDENTIALS_FILE\"\n[default]\naws_access_key_id=$(cat \"$AWS_ACCESS_KEY_ID_FILE\")\naws_secret_access_key=$(cat \"$AWS_SECRET_ACCESS_KEY_FILE\")\nEOF\necho \"Kubernetes Secret does not have credentials file, created a fresh one at $AUTH_CREDENTIALS_FILE\"\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b", "imagePullPolicy": "IfNotPresent", "name": "init-aws-credentials-file", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/aws/keys", "name": "aws-keys", "readOnly": true }, { "mountPath": "/var/run/aws/auth", "name": "aws-auth" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-controller-sa", "serviceAccountName": "aws-ebs-csi-driver-controller-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "emptyDir": {}, "name": "socket-dir" }, { "name": "metrics-serving-cert", "secret": { "defaultMode": 420, "secretName": "aws-ebs-csi-driver-controller-metrics-serving-cert" } }, { "name": "aws-keys", "secret": { "defaultMode": 420, "secretName": "ebs-cloud-credentials" } }, { "emptyDir": {}, "name": "aws-auth" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "aws-ebs-csi-driver-trusted-ca-bundle" }, "name": "non-standard-root-system-trust-ca-bundle" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 3, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "config.openshift.io/inject-proxy": "aws-ebs-csi-driver-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "d2d737b86b069fb7efbdb61434cadf856a9640da6b88c59de6cd2010ce161a0c", "storage.openshift.io/remove-from": "guest" }, "creationTimestamp": "2026-04-28T11:49:01Z", "generation": 1, "labels": { "name": "aws-ebs-csi-driver-operator", "pod-template-hash": "866988d46" }, "name": "aws-ebs-csi-driver-operator-866988d46", "namespace": "openshift-cluster-csi-drivers", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "aws-ebs-csi-driver-operator", "uid": "addcc0e3-bf77-4893-8f61-4132ae03dbf3" } ], "resourceVersion": "5685", "uid": "395e4c88-623e-45b4-904f-92b6d06dc96f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "aws-ebs-csi-driver-operator", "pod-template-hash": "866988d46" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "aws-ebs-csi-driver-operator", "pod-template-hash": "866988d46" } }, "spec": { "containers": [ { "args": [ "start", "-v=2" ], "env": [ { "name": "DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a" }, { "name": "PROVISIONER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e" }, { "name": "ATTACHER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9" }, { "name": "RESIZER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088" }, { "name": "SNAPSHOTTER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed" }, { "name": "NODE_DRIVER_REGISTRAR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca3c49ae637d569b755a3984240d263329f66317aff2cf98e4c2d857f39f0275" }, { "name": "LIVENESS_PROBE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "${OPERATOR_IMAGE_VERSION}" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:398e14b90032556d54b237e0fdfd9f8f9bd974801d37c683d89bdbf26c55ee8d", "imagePullPolicy": "IfNotPresent", "name": "aws-ebs-csi-driver-operator", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "aws-ebs-csi-driver-operator", "serviceAccountName": "aws-ebs-csi-driver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "kubectl.kubernetes.io/default-container": "machine-approver-controller" }, "creationTimestamp": "2026-04-28T11:47:15Z", "generation": 2, "labels": { "app": "machine-approver", "pod-template-hash": "54b548fdb" }, "name": "machine-approver-54b548fdb", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-approver", "uid": "47c5252d-12e0-4f1b-8c77-8df976d905f8" } ], "resourceVersion": "3128", "uid": "f464ae56-0bec-45d6-887d-1faffd88903e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "machine-approver", "pod-template-hash": "54b548fdb" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "machine-approver", "pod-template-hash": "54b548fdb" }, "name": "machine-approver" }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "machine-approver-tls" } ] }, { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2", "--logtostderr", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-cluster-machine-approver", "--api-group-version=machine.openshift.io/v1beta1", "--max-concurrent-reconciles=10" ], "command": [ "/usr/bin/machine-approver" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e0306b36b6133cfe79efc199717f39f8ba8df6af5561a871f516e7d32d234b7b", "imagePullPolicy": "IfNotPresent", "name": "machine-approver-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-approver-sa", "serviceAccountName": "machine-approver-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "machine-approver-tls", "secret": { "defaultMode": 420, "secretName": "machine-approver-tls" } }, { "configMap": { "defaultMode": 440, "name": "machine-approver-config", "optional": true }, "name": "config" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "2", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "kubectl.kubernetes.io/default-container": "machine-approver-controller" }, "creationTimestamp": "2026-04-28T11:47:38Z", "generation": 1, "labels": { "app": "machine-approver", "pod-template-hash": "84bd8b64c5" }, "name": "machine-approver-84bd8b64c5", "namespace": "openshift-cluster-machine-approver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-approver", "uid": "47c5252d-12e0-4f1b-8c77-8df976d905f8" } ], "resourceVersion": "8173", "uid": "7f41851b-507e-41c0-acf0-94fc408ad17f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "machine-approver", "pod-template-hash": "84bd8b64c5" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "machine-approver", "pod-template-hash": "84bd8b64c5" }, "name": "machine-approver" }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "hostPort": 9192, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" }, { "mountPath": "/etc/tls/private", "name": "machine-approver-tls" } ] }, { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2", "--logtostderr", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-cluster-machine-approver", "--api-group-version=machine.openshift.io/v1beta1", "--max-concurrent-reconciles=10" ], "command": [ "/usr/bin/machine-approver" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e0306b36b6133cfe79efc199717f39f8ba8df6af5561a871f516e7d32d234b7b", "imagePullPolicy": "IfNotPresent", "name": "machine-approver-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-approver-sa", "serviceAccountName": "machine-approver-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" }, { "name": "machine-approver-tls", "secret": { "defaultMode": 420, "secretName": "machine-approver-tls" } }, { "configMap": { "defaultMode": 440, "name": "machine-approver-config", "optional": true }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "NodeTuning", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:28Z", "generation": 1, "labels": { "name": "cluster-node-tuning-operator", "pod-template-hash": "5c6dbd988f" }, "name": "cluster-node-tuning-operator-5c6dbd988f", "namespace": "openshift-cluster-node-tuning-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-node-tuning-operator", "uid": "f656f5e3-9613-491e-bad9-18dc6e74ecab" } ], "resourceVersion": "36656", "uid": "0b821a12-516a-4e60-9dfd-624a0cd560c2" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-node-tuning-operator", "pod-template-hash": "5c6dbd988f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-node-tuning-operator", "pod-template-hash": "5c6dbd988f" } }, "spec": { "containers": [ { "args": [ "-v=0" ], "command": [ "cluster-node-tuning-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RESYNC_PERIOD", "value": "600" }, { "name": "CLUSTER_NODE_TUNED_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3580708e3415c9fb3a1fd0c11b45ba0e4cfc2825af9428242a8aac56f3fac9a3" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3580708e3415c9fb3a1fd0c11b45ba0e4cfc2825af9428242a8aac56f3fac9a3", "imagePullPolicy": "IfNotPresent", "name": "cluster-node-tuning-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "node-tuning-operator-tls" }, { "mountPath": "/var/run/configmaps/trusted-ca/", "name": "trusted-ca" }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 499 }, "serviceAccount": "cluster-node-tuning-operator", "serviceAccountName": "cluster-node-tuning-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "node-tuning-operator-tls", "secret": { "defaultMode": 420, "secretName": "node-tuning-operator-tls" } }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "performance-addon-operator-webhook-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManagerV1", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T11:46:13Z", "generation": 1, "labels": { "name": "cluster-olm-operator", "pod-template-hash": "866bbc66c5" }, "name": "cluster-olm-operator-866bbc66c5", "namespace": "openshift-cluster-olm-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-olm-operator", "uid": "e87887d4-f211-408c-a0be-93c672b84398" } ], "resourceVersion": "37080", "uid": "4be27dcb-9567-4516-954b-fc77e63725c9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-olm-operator", "pod-template-hash": "866bbc66c5" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-olm-operator", "pod-template-hash": "866bbc66c5" } }, "spec": { "containers": [ { "args": [ "start" ], "command": [ "/cluster-olm-operator" ], "env": [ { "name": "OPERATOR_NAME", "value": "cluster-olm-operator" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d" }, { "name": "CATALOGD_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9bdb5a41b2201109f610b40ca5791cdb118b061f322dee9682d4343a57a6cded" }, { "name": "OPERATOR_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a289be85e2b0fb3e884c637c5d4e45df246a5260be06fd9dcbee1e18dc6c7341" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2136c0d61a3f1272ef362f0f10766831508abf97ea67b78dfebc6b5e2eaf5b17", "imagePullPolicy": "IfNotPresent", "name": "cluster-olm-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "cluster-olm-operator-serving-cert" }, { "mountPath": "/operand-assets", "name": "operand-assets" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "-c", "cp -a /openshift/manifests /operand-assets/catalogd" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9bdb5a41b2201109f610b40ca5791cdb118b061f322dee9682d4343a57a6cded", "imagePullPolicy": "IfNotPresent", "name": "copy-catalogd-manifests", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/operand-assets", "name": "operand-assets" } ] }, { "args": [ "-c", "cp -a /openshift/manifests /operand-assets/operator-controller" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a289be85e2b0fb3e884c637c5d4e45df246a5260be06fd9dcbee1e18dc6c7341", "imagePullPolicy": "IfNotPresent", "name": "copy-operator-controller-manifests", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/operand-assets", "name": "operand-assets" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-olm-operator", "serviceAccountName": "cluster-olm-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cluster-olm-operator-serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "cluster-olm-operator-serving-cert" } }, { "emptyDir": {}, "name": "operand-assets" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "openshift-samples", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T11:49:41Z", "generation": 1, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "ddc7ff9f8" }, "name": "cluster-samples-operator-ddc7ff9f8", "namespace": "openshift-cluster-samples-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-samples-operator", "uid": "d2097e4f-50ef-4d41-8527-4aa8d8948191" } ], "resourceVersion": "9128", "uid": "0b0f69d4-e90c-462c-9684-cedcb5c6302c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-samples-operator", "pod-template-hash": "ddc7ff9f8" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-samples-operator", "pod-template-hash": "ddc7ff9f8" } }, "spec": { "containers": [ { "command": [ "cluster-samples-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "cluster-samples-operator" }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6a1f428c21dcae4bd399269cbf957719fbfcb78c044f260e76c548feb55bc8ac", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/secrets", "name": "samples-operator-tls" } ] }, { "args": [ "--namespace=openshift-cluster-samples-operator", "--process-name=cluster-samples-operator", "--termination-grace-period=30s", "--files=/etc/secrets/tls.crt,/etc/secrets/tls.key" ], "command": [ "cluster-samples-operator-watch", "file-watcher-watchdog" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6a1f428c21dcae4bd399269cbf957719fbfcb78c044f260e76c548feb55bc8ac", "imagePullPolicy": "IfNotPresent", "name": "cluster-samples-operator-watch", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-samples-operator", "serviceAccountName": "cluster-samples-operator", "shareProcessNamespace": true, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "samples-operator-tls", "secret": { "defaultMode": 420, "secretName": "samples-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Storage", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:32Z", "generation": 1, "labels": { "name": "cluster-storage-operator", "pod-template-hash": "84b97c469d" }, "name": "cluster-storage-operator-84b97c469d", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-storage-operator", "uid": "5eb75bed-7a05-4d0a-bf47-ecef05a5e5a1" } ], "resourceVersion": "36560", "uid": "d3b11abb-981b-4524-a288-572d5fd85038" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-storage-operator", "pod-template-hash": "84b97c469d" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-storage-operator", "pod-template-hash": "84b97c469d" } }, "spec": { "containers": [ { "args": [ "start", "-v=2", "--terminate-on-files=/var/run/secrets/serving-cert/tls.crt", "--terminate-on-files=/var/run/secrets/serving-cert/tls.key" ], "command": [ "cluster-storage-operator", "start" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" }, { "name": "AWS_EBS_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:398e14b90032556d54b237e0fdfd9f8f9bd974801d37c683d89bdbf26c55ee8d" }, { "name": "AWS_EBS_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:32c346d660004ce50755aa9cf9c1ba33a5be6e335f1978089358f84f1601794a" }, { "name": "GCP_PD_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ec2d11c5a70108ae6ce40b5b0c90e7b82efed35ce28e9e834208999bd0e98d0a" }, { "name": "GCP_PD_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:59e8d612e3595c49bd7aa41befb69288454cb49328d83ea5fc41470d0af0a2ba" }, { "name": "OPENSTACK_CINDER_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e6398c068b8e690d5ded0f838fbbbe15554ecf325b57446ab6cbba83b86dcf8c" }, { "name": "OPENSTACK_CINDER_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:47d8c55ab07778fc64888f1422c43c5b10affff763bcf65aacd6a88852068b3f" }, { "name": "OVIRT_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:af62aafbc0cd47ae14f4e8086231c9c05bbd16e16b664c89748b2e9ce3b4375a" }, { "name": "OVIRT_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:baddbff1d77b02f702f26683e79b303670bd927a5d1fae01269b39c90a63cad7" }, { "name": "MANILA_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e649908c6055449076e6467ed9ef43fc11749a7e76597ccaf3f3c06b3e0d3953" }, { "name": "MANILA_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa3e7a73d1f8cd151de13789f2c299aca19a7dac3d11fc661630cdf1c79fabeb" }, { "name": "MANILA_NFS_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6bc92a45aa4a451eb048055339829f7cb7affdf23e163ac0469b1a80bb03896d" }, { "name": "PROVISIONER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:72894ec1bb4085468ec1a68b2d613f681a81d7cb2d87022298f633d5a95e3e3e" }, { "name": "ATTACHER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:434dd79c85019297ac1a5c43ded5626f7243311562f4b30f85ddcaa680b143a9" }, { "name": "RESIZER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:068f5954fa0f1803569b7c393e6d920abdfa8e8ff5a74e7ee53d54d30cc10088" }, { "name": "SNAPSHOTTER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:466a2c4d28b265693e13dc5ef49790e4c377e4e9463f6258de1977bcb5ab39ed" }, { "name": "NODE_DRIVER_REGISTRAR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ca3c49ae637d569b755a3984240d263329f66317aff2cf98e4c2d857f39f0275" }, { "name": "LIVENESS_PROBE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7fa1cef8374dc9b9c4ba3a63a8ff65bdad518bf16fd9f8f0b551ec3dde3571da" }, { "name": "VSPHERE_PROBLEM_DETECTOR_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c559e2bdd66ce30cb7ce361b75be2d4ebba941513f4c7ca7832dc92ab9e14929" }, { "name": "AZURE_DISK_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6283f03994d1c16c14dd8cd87a29874da0cfa9befc52c0c37b8981f75d758cca" }, { "name": "AZURE_DISK_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:549d7305fdf9552ba72edfe4008f46a3d4de5887c13f189c7bd5598dd1db398e" }, { "name": "AZURE_FILE_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b3a6aa7b7240ed51db81b5015fc117d02b179705da8f1344d5d6d4d2cd81a66d" }, { "name": "AZURE_FILE_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8329ca72481880b1b13ca92531741d2baf4cacb4cadb5dd9f2a1881e47a1eb99" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d" }, { "name": "VMWARE_VSPHERE_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:fbd01b4db890e9f0762feff0c00d9cdfdea3d89c2c01d258fff2bec1f538442a" }, { "name": "VMWARE_VSPHERE_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f790fe31697766a6e057e1db0e263f1008e0754244d69b38863e79b0e13f3a17" }, { "name": "VMWARE_VSPHERE_SYNCER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9d65af2943a545075e22a2331d7f0f3e1fbcc087f9d9bc4f1723a1b405b9fd45" }, { "name": "CLUSTER_CLOUD_CONTROLLER_MANAGER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:76cbfb8bdd89e148fd7784868570466a611431baf4fd76e83e9c5cbdc4ed1487" }, { "name": "IBM_VPC_BLOCK_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a805720706520951fe21d751e07fadb80286783829876de0c71ec4e3ef36e7e5" }, { "name": "IBM_VPC_BLOCK_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0be4773b215ce3c3d1ebc31c972af86f146f24dfe811f12644af71cd0dd2a03f" }, { "name": "POWERVS_BLOCK_CSI_DRIVER_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d3419d33a6735a6a46349c6837936232fa3bf04d19a7c5c8024a9efde9636932" }, { "name": "POWERVS_BLOCK_CSI_DRIVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6125367645921ad61bb71372bbe554772c007f73a9096b18a0408d7cb00cfa57" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c501b1ffddec1df80d534eb915eeb497f7796f63d1b13f63cba3642729a760c5", "imagePullPolicy": "IfNotPresent", "name": "cluster-storage-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "cluster-storage-operator-serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 11411, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "cluster-storage-operator", "serviceAccountName": "cluster-storage-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cluster-storage-operator-serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "cluster-storage-operator-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "9ea4153ac6f93c58389a23c89fd4bec2dd2f4a71597adca068864e328fe7cb12" }, "creationTimestamp": "2026-04-28T11:49:03Z", "generation": 1, "labels": { "app": "csi-snapshot-controller", "pod-template-hash": "66c9ff4668" }, "name": "csi-snapshot-controller-66c9ff4668", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "csi-snapshot-controller", "uid": "f40985f0-cbdc-4e5f-b6b4-aac29dc1a8b6" } ], "resourceVersion": "36655", "uid": "7d69fb5e-9fee-4d0b-82df-207f3d2b3c94" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "csi-snapshot-controller", "pod-template-hash": "66c9ff4668" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "csi-snapshot-controller", "pod-template-hash": "66c9ff4668" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app": "csi-snapshot-controller" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "--v=2", "--leader-election=true", "--leader-election-lease-duration=137s", "--leader-election-renew-deadline=107s", "--leader-election-retry-period=26s", "--leader-election-namespace=openshift-cluster-storage-operator" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:45aac33488178f6e2afa38a55eb2ba44048dd0bb1f833cf515b220495c0088f9", "imagePullPolicy": "IfNotPresent", "name": "snapshot-controller", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "csi-snapshot-controller", "serviceAccountName": "csi-snapshot-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "CSISnapshot", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:26Z", "generation": 1, "labels": { "app": "csi-snapshot-controller-operator", "pod-template-hash": "67bff64cc8" }, "name": "csi-snapshot-controller-operator-67bff64cc8", "namespace": "openshift-cluster-storage-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "csi-snapshot-controller-operator", "uid": "d07908ac-0146-4b1d-9b64-f36e0bd6ae70" } ], "resourceVersion": "36569", "uid": "7d7e9f9d-7076-4005-b7a1-15e949c2107b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "csi-snapshot-controller-operator", "pod-template-hash": "67bff64cc8" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "csi-snapshot-controller-operator", "pod-template-hash": "67bff64cc8" } }, "spec": { "containers": [ { "args": [ "start", "-v=2" ], "env": [ { "name": "OPERAND_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:45aac33488178f6e2afa38a55eb2ba44048dd0bb1f833cf515b220495c0088f9" }, { "name": "WEBHOOK_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0d1d1fb554c1bce4e35293e24aba2a24e30218f82379a61c54c582552ba62a07" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a754c86472fa37a7f8ef71055a41a2f31d368d4a079a45e0f7bb8b152af5f058", "imagePullPolicy": "IfNotPresent", "name": "csi-snapshot-controller-operator", "resources": { "requests": { "cpu": "10m", "memory": "65Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "csi-snapshot-controller-operator", "serviceAccountName": "csi-snapshot-controller-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "2", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "kubernetes.io/description": "The cluster-version operator manages OpenShift updates and reconciles core resources and cluster operators." }, "creationTimestamp": "2026-04-28T11:47:10Z", "generation": 1, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "5bdbcf66c4" }, "name": "cluster-version-operator-5bdbcf66c4", "namespace": "openshift-cluster-version", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-version-operator", "uid": "24c2b0e4-e26a-48cc-8444-9559db2289d5" } ], "resourceVersion": "9148", "uid": "5a29a1d8-a250-4ca9-90db-5b3a08ae1fe8" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "5bdbcf66c4" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "hostaccess", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "5bdbcf66c4" }, "name": "cluster-version-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "start", "--release-image=quay.io/openshift-release-dev/ocp-release@sha256:da67fb871dd95ed19a383dce300fb36835092c1a459587d5a1276aa5a50ec43f", "--enable-auto-update=false", "--listen=0.0.0.0:9099", "--serving-cert-file=/etc/tls/serving-cert/tls.crt", "--serving-key-file=/etc/tls/serving-cert/tls.key", "--v=2", "--always-enable-capabilities=Ingress" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "0.0.1-snapshot" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "6443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "api-int.clusterpool418-bb45f.rhtap.devcluster.openshift.com" }, { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "CLUSTER_PROFILE", "value": "self-managed-high-availability" } ], "image": "quay.io/openshift-release-dev/ocp-release@sha256:da67fb871dd95ed19a383dce300fb36835092c1a459587d5a1276aa5a50ec43f", "imagePullPolicy": "IfNotPresent", "name": "cluster-version-operator", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "etc-ssl-certs", "readOnly": true }, { "mountPath": "/etc/cvo/updatepayloads", "name": "etc-cvo-updatepayloads", "readOnly": true }, { "mountPath": "/etc/tls/serving-cert", "name": "serving-cert", "readOnly": true }, { "mountPath": "/etc/tls/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 130, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/etc/ssl/certs", "type": "" }, "name": "etc-ssl-certs" }, { "hostPath": { "path": "/etc/cvo/updatepayloads", "type": "" }, "name": "etc-cvo-updatepayloads" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "cluster-version-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-service-ca.crt" }, "name": "service-ca" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "kubernetes.io/description": "The cluster-version operator manages OpenShift updates and reconciles core resources and cluster operators." }, "creationTimestamp": "2026-04-28T11:45:53Z", "generation": 2, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "fd987677f" }, "name": "cluster-version-operator-fd987677f", "namespace": "openshift-cluster-version", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-version-operator", "uid": "24c2b0e4-e26a-48cc-8444-9559db2289d5" } ], "resourceVersion": "2752", "uid": "395d1ce8-cdf7-4ca4-b531-b5b68c3e49c8" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "fd987677f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "hostaccess", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-version-operator", "pod-template-hash": "fd987677f" }, "name": "cluster-version-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "start", "--release-image=quay.io/openshift-release-dev/ocp-release@sha256:da67fb871dd95ed19a383dce300fb36835092c1a459587d5a1276aa5a50ec43f", "--enable-auto-update=false", "--listen=0.0.0.0:9099", "--serving-cert-file=/etc/tls/serving-cert/tls.crt", "--serving-key-file=/etc/tls/serving-cert/tls.key", "--v=2", "--always-enable-capabilities=Ingress" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "0.0.1-snapshot" }, { "name": "KUBERNETES_SERVICE_PORT", "value": "6443" }, { "name": "KUBERNETES_SERVICE_HOST", "value": "127.0.0.1" }, { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "CLUSTER_PROFILE", "value": "self-managed-high-availability" } ], "image": "quay.io/openshift-release-dev/ocp-release@sha256:da67fb871dd95ed19a383dce300fb36835092c1a459587d5a1276aa5a50ec43f", "imagePullPolicy": "IfNotPresent", "name": "cluster-version-operator", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/ssl/certs", "name": "etc-ssl-certs", "readOnly": true }, { "mountPath": "/etc/cvo/updatepayloads", "name": "etc-cvo-updatepayloads", "readOnly": true }, { "mountPath": "/etc/tls/serving-cert", "name": "serving-cert", "readOnly": true }, { "mountPath": "/etc/tls/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 130, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "hostPath": { "path": "/etc/ssl/certs", "type": "" }, "name": "etc-ssl-certs" }, { "hostPath": { "path": "/etc/cvo/updatepayloads", "type": "" }, "name": "etc-cvo-updatepayloads" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "cluster-version-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-service-ca.crt" }, "name": "service-ca" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:31Z", "generation": 1, "labels": { "app": "openshift-config-operator", "pod-template-hash": "8b9f84fd7" }, "name": "openshift-config-operator-8b9f84fd7", "namespace": "openshift-config-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-config-operator", "uid": "a3fdd7f2-0254-49ef-80b5-10f3b4f52687" } ], "resourceVersion": "37318", "uid": "ad18fc31-a551-4e8e-a099-1a00decbcf18" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-config-operator", "pod-template-hash": "8b9f84fd7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-config-operator", "pod-template-hash": "8b9f84fd7" }, "name": "openshift-config-operator" }, "spec": { "containers": [ { "command": [ "cluster-config-operator", "operator", "--operator-version=$(OPERATOR_IMAGE_VERSION)", "--authoritative-feature-gate-dir=/available-featuregates" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0706c20828bdf978d0be9e4f25ddd23b13810f8b3417531f231eb5abf59a0ba9" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0706c20828bdf978d0be9e4f25ddd23b13810f8b3417531f231eb5abf59a0ba9", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 3, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "openshift-config-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 3, "periodSeconds": 3, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/available-featuregates", "name": "available-featuregates" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "write-available-featuresets", "--asset-output-dir=/available-featuregates", "--payload-version=$(OPERATOR_IMAGE_VERSION)" ], "env": [ { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:db4a5c46febe8e9c51cb60c20b7760b9d396fae23bfbc91dacdcd9402cc94075", "imagePullPolicy": "IfNotPresent", "name": "openshift-api", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/available-featuregates", "name": "available-featuregates" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-config-operator", "serviceAccountName": "openshift-config-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "config-operator-serving-cert" } }, { "emptyDir": { "sizeLimit": "100Mi" }, "name": "available-featuregates" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Console", "config.openshift.io/inject-proxy": "console-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:56:23Z", "generation": 1, "labels": { "name": "console-operator", "pod-template-hash": "68984c957b" }, "name": "console-operator-68984c957b", "namespace": "openshift-console-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console-operator", "uid": "948f71cb-6d0b-4118-a03d-1282943774e5" } ], "resourceVersion": "47480", "uid": "4b3211df-8422-4bb4-80ae-cb2113940f03" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "console-operator", "pod-template-hash": "68984c957b" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "console-operator", "pod-template-hash": "68984c957b" } }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/controller-config.yaml" ], "command": [ "console", "operator" ], "env": [ { "name": "CONSOLE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e" }, { "name": "DOWNLOADS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6adba842183a269ae8f503d3df3efd8a07a074d10ec27eb3766970826e58e596" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERATOR_NAME", "value": "console-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a83be0f61e6b12fe6275e5753cc7ab4cafd6e66ee6179a703e5d8aac95e42ca2", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "console-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console-operator", "serviceAccountName": "console-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "console-operator-config" }, "name": "config" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "20127", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20128", "console.openshift.io/trusted-ca-config-version": "20130", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "e34266d7c4630b68ca42fb6f48b5922683be6e179ec3a9640836845648fdeb97" }, "creationTimestamp": "2026-04-28T11:58:16Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6846c56458" }, "name": "console-6846c56458", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0f44b1fc-cd45-4f35-966e-e3cd5d66d72b" } ], "resourceVersion": "23314", "uid": "987c8396-fccf-4d29-bc41-83b7a976a3c9" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "6846c56458" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "20127", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20128", "console.openshift.io/trusted-ca-config-version": "20130", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6846c56458" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "20127", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "a908545aa798d29ea0525844a538489f76b587043a30d513c7ba142d27fe1b7d" }, "creationTimestamp": "2026-04-28T11:58:18Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6d95fff5d" }, "name": "console-6d95fff5d", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0f44b1fc-cd45-4f35-966e-e3cd5d66d72b" } ], "resourceVersion": "24693", "uid": "89b5c9b3-ea1c-41f4-b763-ae6ee04a3742" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "6d95fff5d" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "20127", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "6d95fff5d" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "26675", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/spec-hash": "a2739b739ed308ec76b6478a662dd293d2597c060052877fe75f41f71656b866" }, "creationTimestamp": "2026-04-28T12:04:09Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7464c77458" }, "name": "console-7464c77458", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0f44b1fc-cd45-4f35-966e-e3cd5d66d72b" } ], "resourceVersion": "41940", "uid": "1c6d6b51-9761-403e-908a-a0d607b1cd24" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "7464c77458" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "26675", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "7464c77458" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "23272", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "651e3840d1b6c6bb42d6dd8aae6b88acd39d826e9796b1dce23ca8548b44ac48" }, "creationTimestamp": "2026-04-28T11:59:18Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "746d8f4994" }, "name": "console-746d8f4994", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0f44b1fc-cd45-4f35-966e-e3cd5d66d72b" } ], "resourceVersion": "24778", "uid": "bade0015-880c-418f-9ec1-361186fa9eac" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "746d8f4994" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "23272", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "746d8f4994" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "26675", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "39436", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "7", "operator.openshift.io/spec-hash": "8a94aa27bac6f7d83ab516501b573d67e56ff52588f8f30e6067aff774ccb8e0" }, "creationTimestamp": "2026-04-28T12:57:57Z", "generation": 2, "labels": { "app": "console", "component": "ui", "pod-template-hash": "84d7fdcfb4" }, "name": "console-84d7fdcfb4", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0f44b1fc-cd45-4f35-966e-e3cd5d66d72b" } ], "resourceVersion": "39796", "uid": "aa7c85d8-c52f-40bc-a021-fe7fa2c952a3" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "84d7fdcfb4" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "26675", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "39436", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "84d7fdcfb4" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "26675", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "39436", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "39765", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "8", "operator.openshift.io/spec-hash": "3faf8fb5fcc65c1534781b5428ca22ec39b613ae4cdfc7b357d1040242c8556c" }, "creationTimestamp": "2026-04-28T12:58:00Z", "generation": 1, "labels": { "app": "console", "component": "ui", "pod-template-hash": "9c7cd95f7" }, "name": "console-9c7cd95f7", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0f44b1fc-cd45-4f35-966e-e3cd5d66d72b" } ], "resourceVersion": "48550", "uid": "223f4373-01d0-4f9a-83c1-544b87eec933" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "9c7cd95f7" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "26675", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "39436", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "39765", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "9c7cd95f7" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "24742", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "27ed75a176a8efa8da43f34715bc979cde31c9ab05db9d450d63770b3443b7e7" }, "creationTimestamp": "2026-04-28T12:00:48Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "bf87cb749" }, "name": "console-bf87cb749", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0f44b1fc-cd45-4f35-966e-e3cd5d66d72b" } ], "resourceVersion": "26954", "uid": "9821a5b1-4d0d-4d19-947d-b982ea636200" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "bf87cb749" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "24742", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "bf87cb749" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "24659", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "67d1f2336f432453b396c26abd61d2d74939dea7af61b8a05c421a89823a5277" }, "creationTimestamp": "2026-04-28T12:00:44Z", "generation": 3, "labels": { "app": "console", "component": "ui", "pod-template-hash": "cdcf7bd54" }, "name": "console-cdcf7bd54", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "console", "uid": "0f44b1fc-cd45-4f35-966e-e3cd5d66d72b" } ], "resourceVersion": "26243", "uid": "51a8c443-a77c-4de8-8f6a-73771dffe85f" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "console", "component": "ui", "pod-template-hash": "cdcf7bd54" } }, "template": { "metadata": { "annotations": { "console.openshift.io/authn-ca-trust-config-version": "19990", "console.openshift.io/console-config-version": "24659", "console.openshift.io/image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "console.openshift.io/infrastructure-config-version": "517", "console.openshift.io/oauth-secret-version": "19974", "console.openshift.io/proxy-config-version": "535", "console.openshift.io/service-ca-config-version": "20131", "console.openshift.io/trusted-ca-config-version": "20137", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "ui", "pod-template-hash": "cdcf7bd54" }, "name": "console" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "ui" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/opt/bridge/bin/bridge", "--public-dir=/opt/bridge/static", "--config=/var/console-config/console-config.yaml", "--service-ca-file=/var/service-ca/service-ca.crt", "--v=2" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:13ab6ab66c76dde19affc8cb8a3b8cfb24af4c555671ce6048c8402f79216d9e", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 1, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "console", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/health", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/serving-cert", "name": "console-serving-cert", "readOnly": true }, { "mountPath": "/var/oauth-config", "name": "console-oauth-config", "readOnly": true }, { "mountPath": "/var/console-config", "name": "console-config", "readOnly": true }, { "mountPath": "/var/service-ca", "name": "service-ca", "readOnly": true }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/oauth-serving-cert", "name": "oauth-serving-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "console", "serviceAccountName": "console", "terminationGracePeriodSeconds": 40, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "name": "console-oauth-config", "secret": { "defaultMode": 420, "secretName": "console-oauth-config" } }, { "configMap": { "defaultMode": 420, "name": "console-config" }, "name": "console-config" }, { "configMap": { "defaultMode": 420, "name": "service-ca" }, "name": "service-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle" }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "oauth-serving-cert" }, "name": "oauth-serving-cert" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "5", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "a3544673f6615aa49d5b832358efc50ed8ebbd02deff8ccdeb214d962221f01f" }, "creationTimestamp": "2026-04-28T11:58:10Z", "generation": 1, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "87b75f899" }, "name": "downloads-87b75f899", "namespace": "openshift-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "downloads", "uid": "3a6e3f4a-37b3-4890-abe0-be52bb3fa7b3" } ], "resourceVersion": "48651", "uid": "f0d01079-0806-4ebc-a32c-bb90550ba3de" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "console", "component": "downloads", "pod-template-hash": "87b75f899" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "console", "component": "downloads", "pod-template-hash": "87b75f899" }, "name": "downloads" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "component", "operator": "In", "values": [ "downloads" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "-c", "cat \u003c\u003cEOF \u003e\u003e/tmp/serve.py\nimport errno, http.server, os, re, signal, socket, sys, tarfile, tempfile, threading, time, zipfile\n\nsignal.signal(signal.SIGTERM, lambda signum, frame: sys.exit(0))\n\ndef write_index(path, message):\n with open(path, 'wb') as f:\n f.write('\\n'.join([\n '\u003c!doctype html\u003e',\n '\u003chtml lang=\"en\"\u003e',\n '\u003chead\u003e',\n ' \u003cmeta charset=\"utf-8\"\u003e',\n '\u003c/head\u003e',\n '\u003cbody\u003e',\n ' {}'.format(message),\n '\u003c/body\u003e',\n '\u003c/html\u003e',\n '',\n ]).encode('utf-8'))\n\n# Launch multiple listeners as threads\nclass Thread(threading.Thread):\n def __init__(self, i, socket):\n threading.Thread.__init__(self)\n self.i = i\n self.socket = socket\n self.daemon = True\n self.start()\n\n def run(self):\n server = http.server.SimpleHTTPRequestHandler\n server.server_version = \"OpenShift Downloads Server\"\n server.sys_version = \"\"\n httpd = http.server.HTTPServer(addr, server, False)\n\n # Prevent the HTTP server from re-binding every handler.\n # https://stackoverflow.com/questions/46210672/\n httpd.socket = self.socket\n httpd.server_bind = self.server_close = lambda self: None\n\n httpd.serve_forever()\n\ntemp_dir = tempfile.mkdtemp()\nprint('serving from {}'.format(temp_dir))\nos.chdir(temp_dir)\nfor arch in ['amd64', 'arm64', 'ppc64le', 's390x']:\n os.mkdir(arch)\ncontent = ['\u003ca href=\"oc-license\"\u003elicense\u003c/a\u003e']\nos.symlink('/usr/share/openshift/LICENSE', 'oc-license')\n\nfor arch, operating_system, path in [\n ('amd64', 'linux', '/usr/share/openshift/linux_amd64/oc'),\n ('amd64', 'mac', '/usr/share/openshift/mac/oc'),\n ('amd64', 'windows', '/usr/share/openshift/windows/oc.exe'),\n ('arm64', 'linux', '/usr/share/openshift/linux_arm64/oc'),\n ('arm64', 'mac', '/usr/share/openshift/mac_arm64/oc'),\n ('ppc64le', 'linux', '/usr/share/openshift/linux_ppc64le/oc'),\n ('s390x', 'linux', '/usr/share/openshift/linux_s390x/oc'),\n ]:\n basename = os.path.basename(path)\n target_path = os.path.join(arch, operating_system, basename)\n os.mkdir(os.path.join(arch, operating_system))\n os.symlink(path, target_path)\n base_root, _ = os.path.splitext(basename)\n archive_path_root = os.path.join(arch, operating_system, base_root)\n with tarfile.open('{}.tar'.format(archive_path_root), 'w') as tar:\n tar.add(path, basename)\n with zipfile.ZipFile('{}.zip'.format(archive_path_root), 'w') as zip:\n zip.write(path, basename)\n content.append(\n '\u003ca href=\"{0}\"\u003eoc ({1} {2})\u003c/a\u003e (\u003ca href=\"{3}.tar\"\u003etar\u003c/a\u003e \u003ca href=\"{3}.zip\"\u003ezip\u003c/a\u003e)'.format(\n target_path, arch, operating_system, archive_path_root\n )\n )\n\nfor root, directories, filenames in os.walk(temp_dir):\n root_link = os.path.relpath(temp_dir, os.path.join(root, 'child')).replace(os.path.sep, '/')\n for directory in directories:\n write_index(\n path=os.path.join(root, directory, 'index.html'),\n message='\u003cp\u003eDirectory listings are disabled. See \u003ca href=\"{}\"\u003ehere\u003c/a\u003e for available content.\u003c/p\u003e'.format(root_link),\n )\n\nwrite_index(\n path=os.path.join(temp_dir, 'index.html'),\n message='\\n'.join(\n ['\u003cul\u003e'] +\n [' \u003cli\u003e{}\u003c/li\u003e'.format(entry) for entry in content] +\n ['\u003c/ul\u003e']\n ),\n)\n\n# Create socket\n# IPv6 should handle IPv4 passively so long as it is not bound to a\n# specific address or set to IPv6_ONLY\n# https://stackoverflow.com/questions/25817848/python-3-does-http-server-support-ipv6\ntry:\n addr = ('::', 8080)\n sock = socket.socket(socket.AF_INET6, socket.SOCK_STREAM)\nexcept socket.error as err:\n # errno.EAFNOSUPPORT is \"socket.error: [Errno 97] Address family not supported by protocol\"\n # When IPv6 is disabled, socket will bind using IPv4.\n if err.errno == errno.EAFNOSUPPORT:\n addr = ('', 8080)\n sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM)\n else:\n raise \nsock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1)\nsock.bind(addr)\nsock.listen(5)\n\n[Thread(i, socket=sock) for i in range(100)]\ntime.sleep(9e9)\nEOF\nexec python3 /tmp/serve.py\n" ], "command": [ "/bin/sh" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6adba842183a269ae8f503d3df3efd8a07a074d10ec27eb3766970826e58e596", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "download-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 0, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:15Z", "generation": 1, "labels": { "app": "openshift-controller-manager-operator", "pod-template-hash": "c49f4d964" }, "name": "openshift-controller-manager-operator-c49f4d964", "namespace": "openshift-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-controller-manager-operator", "uid": "0c8d0b44-d9c1-417d-be48-7f420d515d0a" } ], "resourceVersion": "37245", "uid": "eb91eaec-153d-440d-b01a-329f5c92d0e1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-controller-manager-operator", "pod-template-hash": "c49f4d964" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-operator", "pod-template-hash": "c49f4d964" }, "name": "openshift-controller-manager-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-openshift-controller-manager-operator", "operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "ROUTE_CONTROLLER_MANAGER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:06a4419324ea44746c10efdeb79a6f9ad1efd2f47d2f88a3730b16c8667c91dc", "imagePullPolicy": "IfNotPresent", "name": "openshift-controller-manager-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-operator", "serviceAccountName": "openshift-controller-manager-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-controller-manager-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-controller-manager-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "9", "operator.openshift.io/spec-hash": "49472d1b5701ad17a106899b3ff253b8fec253229096294b59947ebc56983fcc", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T12:58:17Z", "generation": 4, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "699b7bd48" }, "name": "controller-manager-699b7bd48", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "67587b54-cdb0-4a45-80fa-8c54cb1c5abd" } ], "resourceVersion": "42331", "uid": "43aa8d36-76fb-4673-9a5d-9351c841b9e1" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "699b7bd48" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "15420", "configmaps/config": "40926", "configmaps/openshift-global-ca": "39895", "configmaps/openshift-service-ca": "6795", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "699b7bd48" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "6ef9eab3402d2d0b553be2065f354fdac8caf511e309dc1992298d6306601ea7", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:49:07Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6c54f9b887" }, "name": "controller-manager-6c54f9b887", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "67587b54-cdb0-4a45-80fa-8c54cb1c5abd" } ], "resourceVersion": "15571", "uid": "fe7365d6-bf0e-46f1-98c2-4f66a6d54d85" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "6c54f9b887" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "6137", "configmaps/openshift-global-ca": "5869", "configmaps/openshift-service-ca": "5864", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6c54f9b887" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "8", "operator.openshift.io/spec-hash": "e296b27efc5d227da33eb4d0c8d092708896b4d43e4eeec534391651317e489a", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T12:57:57Z", "generation": 7, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6c6fbc4d6f" }, "name": "controller-manager-6c6fbc4d6f", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "67587b54-cdb0-4a45-80fa-8c54cb1c5abd" } ], "resourceVersion": "41217", "uid": "83acd703-a9fe-491a-858c-f5553be87770" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "6c6fbc4d6f" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "15420", "configmaps/config": "39451", "configmaps/openshift-global-ca": "5869", "configmaps/openshift-service-ca": "6795", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6c6fbc4d6f" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "0c8a9cfeac8f669a9f63346fe89564580a3337a40766021357d3e6944bada3e1", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:49:04Z", "generation": 4, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6f56756b78" }, "name": "controller-manager-6f56756b78", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "67587b54-cdb0-4a45-80fa-8c54cb1c5abd" } ], "resourceVersion": "7637", "uid": "a5f8237e-c888-489d-97fb-11a955ef779c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "6f56756b78" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "1", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "6f56756b78" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "fb016ff030ba9aa5e9bb9b9aa11ad602aa9b5196f62a0b0c3cbaa137b012ddd9", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:55:51Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "746c7f7977" }, "name": "controller-manager-746c7f7977", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "67587b54-cdb0-4a45-80fa-8c54cb1c5abd" } ], "resourceVersion": "17197", "uid": "726ea0a1-6be3-4486-b9c2-cafd7bebe5a6" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "746c7f7977" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "15420", "configmaps/config": "7620", "configmaps/openshift-global-ca": "5869", "configmaps/openshift-service-ca": "6795", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "746c7f7977" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "6", "operator.openshift.io/spec-hash": "2a04c1b3a3f9c75ec81c9d1392ca01c7d21b30cfea84ed78fce738df2521e9bd", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:55:52Z", "generation": 7, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "748b64fb49" }, "name": "controller-manager-748b64fb49", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "67587b54-cdb0-4a45-80fa-8c54cb1c5abd" } ], "resourceVersion": "21637", "uid": "984e143b-feb3-4da9-8ee2-a85dd461d699" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "748b64fb49" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "15420", "configmaps/config": "15454", "configmaps/openshift-global-ca": "5869", "configmaps/openshift-service-ca": "6795", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "748b64fb49" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "7", "operator.openshift.io/spec-hash": "c80cf447edfad3cf712c0dd8c1c4bc62ad640cb84037e717de89668fe1a6c112", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:58:28Z", "generation": 7, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "7579d7b5d" }, "name": "controller-manager-7579d7b5d", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "67587b54-cdb0-4a45-80fa-8c54cb1c5abd" } ], "resourceVersion": "40051", "uid": "58acc2f2-005f-41ad-89a2-16cd38604a11" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "7579d7b5d" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "15420", "configmaps/config": "21149", "configmaps/openshift-global-ca": "5869", "configmaps/openshift-service-ca": "6795", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "7579d7b5d" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "61991fd1e38fa559e334cbf9831fa4862b7b6fc61b0a67a3f9b1451820c01853", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:49:05Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "8658f5fb7b" }, "name": "controller-manager-8658f5fb7b", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "67587b54-cdb0-4a45-80fa-8c54cb1c5abd" } ], "resourceVersion": "15474", "uid": "9477aa9b-0623-4cf4-a669-4a4249da47a6" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "8658f5fb7b" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "5863", "configmaps/openshift-global-ca": "5865", "configmaps/openshift-service-ca": "5864", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "8658f5fb7b" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "c6a2d85b13b21db93db93e56b29995d9fd54e08e4f95a372ff773f0f24dff10c", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:49:23Z", "generation": 3, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "b695fd57c" }, "name": "controller-manager-b695fd57c", "namespace": "openshift-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "controller-manager", "uid": "67587b54-cdb0-4a45-80fa-8c54cb1c5abd" } ], "resourceVersion": "15779", "uid": "645befa8-ceb7-4887-9f1d-5014917cd12c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "pod-template-hash": "b695fd57c" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "7620", "configmaps/openshift-global-ca": "5869", "configmaps/openshift-service-ca": "6795", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "b695fd57c" }, "name": "openshift-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "openshift-controller-manager-a", "controller-manager": "true", "openshift-route-controller-manager-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "openshift-controller-manager", "start" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4dc3e4379ca58fead4dfd76c80bdbfeeeec1e3ca57e2fea2817a2b5a00c07547", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "proxy-ca-bundles" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-controller-manager-sa", "serviceAccountName": "openshift-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "openshift-global-ca" }, "name": "proxy-ca-bundles" } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:15Z", "generation": 1, "labels": { "name": "dns-operator", "pod-template-hash": "6fd4f8db74" }, "name": "dns-operator-6fd4f8db74", "namespace": "openshift-dns-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "dns-operator", "uid": "6e0f677a-0120-4e2a-bfe6-8a15e6a28646" } ], "resourceVersion": "37113", "uid": "cd907795-1414-42a9-a3cc-74407c99b616" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "dns-operator", "pod-template-hash": "6fd4f8db74" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "dns-operator", "pod-template-hash": "6fd4f8db74" } }, "spec": { "containers": [ { "command": [ "dns-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:de1c2aadb2cc989d2dd5da21bcd70ab36d2805638cac81028a10fc772972d1fe" }, { "name": "OPENSHIFT_CLI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bd12da40794cf7faff3eef68b853d343660acefb8c23ba1786d120430f09760c" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5202545083b765c2bd05ff92bfb90bb41db7b5c578c977db550c6e14bd8cead1", "imagePullPolicy": "IfNotPresent", "name": "dns-operator", "resources": { "requests": { "cpu": "10m", "memory": "29Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr", "--secure-listen-address=:9393", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:60000/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9393, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true } ] } ], "dnsPolicy": "Default", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "dns-operator", "serviceAccountName": "dns-operator", "terminationGracePeriodSeconds": 2, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "metrics-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:16Z", "generation": 1, "labels": { "app": "etcd-operator", "pod-template-hash": "68949cbb7d" }, "name": "etcd-operator-68949cbb7d", "namespace": "openshift-etcd-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "etcd-operator", "uid": "45a1c7ef-1488-4bd6-808f-7a914a099a32" } ], "resourceVersion": "37282", "uid": "47701bb1-e8b5-45ce-a1d1-ad73269fd91e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "etcd-operator", "pod-template-hash": "68949cbb7d" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "etcd-operator", "pod-template-hash": "68949cbb7d" }, "name": "etcd-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "--terminate-on-files=/var/run/secrets/serving-cert/tls.crt", "--terminate-on-files=/var/run/secrets/serving-cert/tls.key", "--terminate-on-files=/var/run/secrets/etcd-client/tls.crt", "--terminate-on-files=/var/run/secrets/etcd-client/tls.key", "--terminate-on-files=/var/run/configmaps/etcd-ca/ca-bundle.crt", "--terminate-on-files=/var/run/configmaps/etcd-service-ca/service-ca.crt" ], "command": [ "cluster-etcd-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e7edc6591660cf1b3d08b138a4343aea37512307c679127d3c7366a463a01211" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:305a83df6a0f2ed5da1fde3be67a3751d913a6526b25a40d9a320e25d4423d0c" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPENSHIFT_PROFILE", "value": "web" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:305a83df6a0f2ed5da1fde3be67a3751d913a6526b25a40d9a320e25d4423d0c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 60, "successThreshold": 1, "timeoutSeconds": 30 }, "name": "etcd-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/configmaps/etcd-ca", "name": "etcd-ca" }, { "mountPath": "/var/run/configmaps/etcd-service-ca", "name": "etcd-service-ca" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "etcd-operator", "serviceAccountName": "etcd-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "etcd-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "etcd-operator-config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "etcd-ca-bundle" }, "name": "etcd-ca" }, { "configMap": { "defaultMode": 420, "name": "etcd-service-ca-bundle" }, "name": "etcd-service-ca" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:06Z", "generation": 1, "labels": { "app.kubernetes.io/name": "cluster", "openshift.io/required-scc": "restricted-v2", "pod-template-hash": "7cc8555884" }, "name": "cluster-7cc8555884", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster", "uid": "33855316-1599-4631-9e90-706d0adc8c10" } ], "resourceVersion": "45074", "uid": "31685f91-312b-427d-9013-7289070212cb" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "cluster", "pod-template-hash": "7cc8555884" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "cluster", "openshift.io/required-scc": "restricted-v2", "pod-template-hash": "7cc8555884" } }, "spec": { "containers": [ { "env": [ { "name": "INSECURE", "value": "true" } ], "image": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:3cb24a8c10d7bb3664b4b379eea192c5212470c534f37429802d82306500514f", "imagePullPolicy": "IfNotPresent", "name": "cluster", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/gitops/ssl", "name": "backend-ssl", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "gitops-service-cluster", "serviceAccountName": "gitops-service-cluster", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "backend-ssl", "secret": { "defaultMode": 420, "secretName": "cluster" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:06Z", "generation": 1, "labels": { "app": "gitops-plugin", "pod-template-hash": "7fb9f5bc6b" }, "name": "gitops-plugin-7fb9f5bc6b", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "gitops-plugin", "uid": "913a3b84-c1ec-47d4-b143-cc7c77fcaef3" } ], "resourceVersion": "44916", "uid": "eea6b21f-608e-4f26-bfb5-8babb43f76fa" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "gitops-plugin", "pod-template-hash": "7fb9f5bc6b" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "gitops-plugin", "pod-template-hash": "7fb9f5bc6b" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:247e31fbbaf50acd865432bf5561ba4d7a46ed397a2ca06116d9f77f70745b01", "imagePullPolicy": "IfNotPresent", "name": "gitops-plugin", "ports": [ { "containerPort": 9001, "name": "http", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/httpd-ssl/certs/tls.crt", "name": "console-serving-cert", "readOnly": true, "subPath": "tls.crt" }, { "mountPath": "/etc/httpd-ssl/private/tls.key", "name": "console-serving-cert", "readOnly": true, "subPath": "tls.key" }, { "mountPath": "/etc/httpd-cfg/httpd.conf", "name": "httpd-cfg", "readOnly": true, "subPath": "httpd.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "console-serving-cert", "secret": { "defaultMode": 420, "secretName": "console-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "httpd-cfg" }, "name": "httpd-cfg" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:09Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller", "pod-template-hash": "64cf455cf6" }, "name": "openshift-gitops-applicationset-controller-64cf455cf6", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-applicationset-controller", "uid": "500a37cf-ba5a-49f3-99d3-dd1f09c208ed" } ], "resourceVersion": "44929", "uid": "1904546b-8dbb-403b-9a00-dc2675b66a66" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller", "pod-template-hash": "64cf455cf6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-applicationset-controller", "pod-template-hash": "64cf455cf6" } }, "spec": { "containers": [ { "command": [ "entrypoint.sh", "argocd-applicationset-controller", "--argocd-repo-server", "openshift-gitops-repo-server.openshift-gitops.svc.cluster.local:8081", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "argocd-applicationset-controller", "ports": [ { "containerPort": 7000, "name": "webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "2", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-applicationset-controller", "serviceAccountName": "openshift-gitops-applicationset-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-28T12:59:09Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "dex.config.changed": "04282026-125926-UTC", "pod-template-hash": "6c99d44fb6" }, "name": "openshift-gitops-dex-server-6c99d44fb6", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-dex-server", "uid": "1fd7a760-f4ba-45d3-9e5f-4e3c8f665cb4" } ], "resourceVersion": "45293", "uid": "d43e8522-fb33-4f79-8f7d-ce003e3ce0b9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "6c99d44fb6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "dex.config.changed": "04282026-125926-UTC", "pod-template-hash": "6c99d44fb6" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-dex-server", "serviceAccountName": "openshift-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:06Z", "generation": 2, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "6d5cb6bfb6" }, "name": "openshift-gitops-dex-server-6d5cb6bfb6", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-dex-server", "uid": "1fd7a760-f4ba-45d3-9e5f-4e3c8f665cb4" } ], "resourceVersion": "45305", "uid": "e86df70a-e10c-4d0b-957e-ddccefc687cf" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "6d5cb6bfb6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-dex-server", "pod-template-hash": "6d5cb6bfb6" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-dex-server", "serviceAccountName": "openshift-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:09Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-redis", "pod-template-hash": "84779fc6c8" }, "name": "openshift-gitops-redis-84779fc6c8", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-redis", "uid": "2c19dcd5-73eb-492e-8629-bdbb450d3ecf" } ], "resourceVersion": "45537", "uid": "44e9296e-85e0-4f9b-83dc-fa0c86482606" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-redis", "pod-template-hash": "84779fc6c8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-redis", "pod-template-hash": "84779fc6c8" } }, "spec": { "containers": [ { "args": [ "redis-server", "--protected-mode", "no", "--save", "", "--appendonly", "no", "--requirepass $(REDIS_PASSWORD)" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3", "imagePullPolicy": "IfNotPresent", "name": "redis", "ports": [ { "containerPort": 6379, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "250m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/redis/tls", "name": "argocd-operator-redis-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-redis", "serviceAccountName": "openshift-gitops-argocd-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:09Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-repo-server", "pod-template-hash": "76b7544bb6" }, "name": "openshift-gitops-repo-server-76b7544bb6", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-repo-server", "uid": "32e8cff8-dfb1-4e06-b6e4-f4b590405534" } ], "resourceVersion": "45854", "uid": "2364a9d1-8709-414c-bcc1-7fd01c718a5b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-repo-server", "pod-template-hash": "76b7544bb6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-repo-server", "pod-template-hash": "76b7544bb6" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "command": [ "uid_entrypoint.sh", "argocd-repo-server", "--redis", "openshift-gitops-redis.openshift-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "name": "argocd-repo-server", "ports": [ { "containerPort": 8081, "name": "server", "protocol": "TCP" }, { "containerPort": 8084, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/app/config/reposerver/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/reposerver/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd/cmp-server/plugins", "name": "plugins" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd-cmp-server", "/var/run/argocd/argocd-cmp-server" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/argocd", "name": "var-files" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "var-files" }, { "emptyDir": {}, "name": "plugins" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:09Z", "generation": 1, "labels": { "app.kubernetes.io/name": "openshift-gitops-server", "pod-template-hash": "8466c59974" }, "name": "openshift-gitops-server-8466c59974", "namespace": "openshift-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-server", "uid": "8f487d57-9a4c-4c86-acbc-80118418406e" } ], "resourceVersion": "46456", "uid": "5070a2f5-a2e7-4454-9559-8348beca1bd6" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "openshift-gitops-server", "pod-template-hash": "8466c59974" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "openshift-gitops-server", "pod-template-hash": "8466c59974" } }, "spec": { "containers": [ { "command": [ "argocd-server", "--staticassets", "/shared/app", "--dex-server", "https://openshift-gitops-dex-server.openshift-gitops.svc.cluster.local:5556", "--repo-server", "openshift-gitops-repo-server.openshift-gitops.svc.cluster.local:8081", "--redis", "openshift-gitops-redis.openshift-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "openshift-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "argocd-server", "ports": [ { "containerPort": 8080, "protocol": "TCP" }, { "containerPort": 8083, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/server/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/server/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd", "name": "plugins-home" }, { "mountPath": "/home/argocd/params", "name": "argocd-cmd-params-cm" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-gitops-argocd-server", "serviceAccountName": "openshift-gitops-argocd-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "plugins-home" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "server.profile.enabled", "path": "profiler.enabled" } ], "name": "argocd-cmd-params-cm", "optional": true }, "name": "argocd-cmd-params-cm" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "ImageRegistry", "config.openshift.io/inject-proxy": "cluster-image-registry-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:29Z", "generation": 1, "labels": { "name": "cluster-image-registry-operator", "pod-template-hash": "7bd8758498" }, "name": "cluster-image-registry-operator-7bd8758498", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-image-registry-operator", "uid": "2d5f8cff-0b06-40af-b1c0-428277061fac" } ], "resourceVersion": "45428", "uid": "78fc15c7-f7ac-4f49-a89a-31e6795ac92c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "cluster-image-registry-operator", "pod-template-hash": "7bd8758498" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "cluster-image-registry-operator", "pod-template-hash": "7bd8758498" } }, "spec": { "containers": [ { "args": [ "--files=/var/run/configmaps/trusted-ca/tls-ca-bundle.pem", "--files=/etc/secrets/tls.crt", "--files=/etc/secrets/tls.key" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "cluster-image-registry-operator" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:34e152aa345e2e2dc8b756b44014bf0de60801cddf45bd4c89d794165fff47a7" }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c58b3f3f33b4117627975dc67df83f087e8b8e0160027b4f3df5b9416a23b24c" }, { "name": "IMAGE_PRUNER", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bd12da40794cf7faff3eef68b853d343660acefb8c23ba1786d120430f09760c" }, { "name": "AZURE_ENVIRONMENT_FILEPATH", "value": "/tmp/azurestackcloud.json" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:34e152aa345e2e2dc8b756b44014bf0de60801cddf45bd4c89d794165fff47a7", "imagePullPolicy": "IfNotPresent", "name": "cluster-image-registry-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/trusted-ca/", "name": "trusted-ca" }, { "mountPath": "/etc/secrets", "name": "image-registry-operator-tls" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-image-registry-operator", "serviceAccountName": "cluster-image-registry-operator", "shareProcessNamespace": false, "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "image-registry-operator-tls", "secret": { "defaultMode": 420, "secretName": "image-registry-operator-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "imageregistry.operator.openshift.io/checksum": "sha256:b65da34b0594eec3fc027415bd326abb7d79ba5a1a1817de94947e1e03a9e126", "operator.openshift.io/spec-hash": "1f4e3367251db5ca871486e46f88aa3598ef77b18157ae88a890c8adb4637d37", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:57:57Z", "generation": 4, "labels": { "docker-registry": "default", "pod-template-hash": "64d46fcd9b" }, "name": "image-registry-64d46fcd9b", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "45fce27f-1a49-4ef8-9284-4210696ab804" } ], "resourceVersion": "42822", "uid": "4905dbe3-1b8f-4503-8604-8d7abfc37e79" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "64d46fcd9b" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:17004535ede24d24f2f3aec4f8c8848c091e5407a460fefba3632f5b179faa00", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "64d46fcd9b" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "clusterpool418-bb45f-xt782-image-registry-us-east-1-ajxrmfeinv" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "d9a91efa2073d115d9a297c990228282222541a3c8c01c7d7603ad4b76b77310c88f88a8ce86d1c0d19abe16639b15f65fa1745369550d2b1314cea896ab2d65" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c58b3f3f33b4117627975dc67df83f087e8b8e0160027b4f3df5b9416a23b24c", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "imageregistry.operator.openshift.io/checksum": "sha256:590820b7e8c6e4f8aefee06f702d6e6c67a41dcaddb908c4e237ef558bb38b6f", "operator.openshift.io/spec-hash": "1006fe7aff3c78dca834688f2b9a40716cc8dac4917c02d7ccf8f996485e4f4f", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T12:58:03Z", "generation": 2, "labels": { "docker-registry": "default", "pod-template-hash": "677bd966c8" }, "name": "image-registry-677bd966c8", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "45fce27f-1a49-4ef8-9284-4210696ab804" } ], "resourceVersion": "45949", "uid": "511c2535-703f-4324-bd1d-3069ba57f61d" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "677bd966c8" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:0e801efb74f08408deb7b60d5239d5a6bc8129d4ab56db12e4209e49075b2884", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "677bd966c8" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "clusterpool418-bb45f-xt782-image-registry-us-east-1-ajxrmfeinv" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "d9a91efa2073d115d9a297c990228282222541a3c8c01c7d7603ad4b76b77310c88f88a8ce86d1c0d19abe16639b15f65fa1745369550d2b1314cea896ab2d65" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c58b3f3f33b4117627975dc67df83f087e8b8e0160027b4f3df5b9416a23b24c", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "imageregistry.operator.openshift.io/checksum": "sha256:9c0cff27403a70e47cb705b17fdcca9544dda9aa0a27d182e0bb22318349b111", "operator.openshift.io/spec-hash": "87ac56d1645a5be7efea54601c5bd247b4b3f26e08ad7f78bb7f926d40d99709", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T12:57:58Z", "generation": 3, "labels": { "docker-registry": "default", "pod-template-hash": "8576f7c7f4" }, "name": "image-registry-8576f7c7f4", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "45fce27f-1a49-4ef8-9284-4210696ab804" } ], "resourceVersion": "39957", "uid": "94b54c0a-79a4-4fcd-ab02-782bf0266295" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "8576f7c7f4" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:cfa9ab9b4ae37c308b333ee318a1ccc44f567f94678e9197edf7ba8ac046920e", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "8576f7c7f4" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "clusterpool418-bb45f-xt782-image-registry-us-east-1-ajxrmfeinv" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "d9a91efa2073d115d9a297c990228282222541a3c8c01c7d7603ad4b76b77310c88f88a8ce86d1c0d19abe16639b15f65fa1745369550d2b1314cea896ab2d65" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c58b3f3f33b4117627975dc67df83f087e8b8e0160027b4f3df5b9416a23b24c", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "imageregistry.operator.openshift.io/checksum": "sha256:0cf113adab5bac7948f17831a11c7c39ca2a6fefbb329dfe455c5af1781c89fa", "operator.openshift.io/spec-hash": "4dd40e2ae7307849502c04e1971d8727770e6147317850686cdb9740447e4355", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:57:56Z", "generation": 3, "labels": { "docker-registry": "default", "pod-template-hash": "9b894f487" }, "name": "image-registry-9b894f487", "namespace": "openshift-image-registry", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "image-registry", "uid": "45fce27f-1a49-4ef8-9284-4210696ab804" } ], "resourceVersion": "22369", "uid": "7b0e1790-9c44-4887-ab23-dd97acacc14a" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "docker-registry": "default", "pod-template-hash": "9b894f487" } }, "template": { "metadata": { "annotations": { "imageregistry.operator.openshift.io/dependencies-checksum": "sha256:dab197c2d1603745d91c45c48a89a4d21883602d1d3a8940b44761b45fef6cc9", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "docker-registry": "default", "pod-template-hash": "9b894f487" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "namespaces": [ "openshift-image-registry" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/sh", "-c", "mkdir -p /etc/pki/ca-trust/extracted/edk2 /etc/pki/ca-trust/extracted/java /etc/pki/ca-trust/extracted/openssl /etc/pki/ca-trust/extracted/pem \u0026\u0026 update-ca-trust extract --output /etc/pki/ca-trust/extracted/ \u0026\u0026 exec /usr/bin/dockerregistry" ], "env": [ { "name": "REGISTRY_STORAGE", "value": "s3" }, { "name": "REGISTRY_STORAGE_S3_BUCKET", "value": "clusterpool418-bb45f-xt782-image-registry-us-east-1-ajxrmfeinv" }, { "name": "REGISTRY_STORAGE_S3_REGION", "value": "us-east-1" }, { "name": "REGISTRY_STORAGE_S3_ENCRYPT", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_FORCEPATHSTYLE", "value": "true" }, { "name": "REGISTRY_STORAGE_S3_CREDENTIALSCONFIGPATH", "value": "/var/run/secrets/cloud/credentials" }, { "name": "REGISTRY_STORAGE_S3_USEDUALSTACK", "value": "true" }, { "name": "REGISTRY_HTTP_ADDR", "value": ":5000" }, { "name": "REGISTRY_HTTP_NET", "value": "tcp" }, { "name": "REGISTRY_HTTP_SECRET", "value": "d9a91efa2073d115d9a297c990228282222541a3c8c01c7d7603ad4b76b77310c88f88a8ce86d1c0d19abe16639b15f65fa1745369550d2b1314cea896ab2d65" }, { "name": "REGISTRY_LOG_LEVEL", "value": "info" }, { "name": "REGISTRY_OPENSHIFT_QUOTA_ENABLED", "value": "true" }, { "name": "REGISTRY_STORAGE_CACHE_BLOBDESCRIPTOR", "value": "inmemory" }, { "name": "REGISTRY_STORAGE_DELETE_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_ENABLED", "value": "true" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_INTERVAL", "value": "10s" }, { "name": "REGISTRY_HEALTH_STORAGEDRIVER_THRESHOLD", "value": "1" }, { "name": "REGISTRY_OPENSHIFT_METRICS_ENABLED", "value": "true" }, { "name": "REGISTRY_OPENSHIFT_SERVER_ADDR", "value": "image-registry.openshift-image-registry.svc:5000" }, { "name": "REGISTRY_HTTP_TLS_CERTIFICATE", "value": "/etc/secrets/tls.crt" }, { "name": "REGISTRY_HTTP_TLS_KEY", "value": "/etc/secrets/tls.key" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c58b3f3f33b4117627975dc67df83f087e8b8e0160027b4f3df5b9416a23b24c", "imagePullPolicy": "IfNotPresent", "lifecycle": { "preStop": { "exec": { "command": [ "sleep", "25" ] } } }, "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "registry", "ports": [ { "containerPort": 5000, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5000, "scheme": "HTTPS" }, "initialDelaySeconds": 15, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/cloud", "name": "image-registry-private-configuration", "readOnly": true }, { "mountPath": "/etc/secrets", "name": "registry-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted", "name": "ca-trust-extracted" }, { "mountPath": "/etc/pki/ca-trust/source/anchors", "name": "registry-certificates" }, { "mountPath": "/usr/share/pki/ca-trust-source", "name": "trusted-ca" }, { "mountPath": "/var/lib/kubelet/", "name": "installation-pull-secrets" }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroup": 1000290000, "fsGroupChangePolicy": "OnRootMismatch" }, "serviceAccount": "registry", "serviceAccountName": "registry", "terminationGracePeriodSeconds": 55, "topologySpreadConstraints": [ { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "kubernetes.io/hostname", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "node-role.kubernetes.io/worker", "whenUnsatisfiable": "DoNotSchedule" }, { "labelSelector": { "matchLabels": { "docker-registry": "default" } }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "DoNotSchedule" } ], "volumes": [ { "name": "image-registry-private-configuration", "secret": { "defaultMode": 420, "optional": false, "secretName": "image-registry-private-configuration" } }, { "name": "registry-tls", "projected": { "defaultMode": 420, "sources": [ { "secret": { "name": "image-registry-tls" } } ] } }, { "emptyDir": {}, "name": "ca-trust-extracted" }, { "configMap": { "defaultMode": 420, "name": "image-registry-certificates" }, "name": "registry-certificates" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "anchors/ca-bundle.crt" } ], "name": "trusted-ca", "optional": true }, "name": "trusted-ca" }, { "name": "installation-pull-secrets", "secret": { "defaultMode": 420, "items": [ { "key": ".dockerconfigjson", "path": "config.json" } ], "optional": true, "secretName": "installation-pull-secrets" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Ingress", "config.openshift.io/inject-proxy": "ingress-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:30Z", "generation": 1, "labels": { "name": "ingress-operator", "pod-template-hash": "559b957cc9" }, "name": "ingress-operator-559b957cc9", "namespace": "openshift-ingress-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "ingress-operator", "uid": "872421a1-617f-4f01-a87e-588e8d87ad3c" } ], "resourceVersion": "41241", "uid": "e00af77c-5c60-4aca-b781-d758877ee3d4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "ingress-operator", "pod-template-hash": "559b957cc9" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "ingress-operator", "pod-template-hash": "559b957cc9" } }, "spec": { "containers": [ { "command": [ "ingress-operator", "start", "--namespace", "$(WATCH_NAMESPACE)", "--image", "$(IMAGE)", "--canary-image", "$(CANARY_IMAGE)", "--release-version", "$(RELEASE_VERSION)" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56cfd08a2da5ddedbd9384b1bd6c2ead80a32d8761565973ae388ab8622356db" }, { "name": "CANARY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ff05f68cb78cb35212f4878d63631f37bcd4f7b8f4acb0ab4b2bc99f3c3b08af" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ff05f68cb78cb35212f4878d63631f37bcd4f7b8f4acb0ab4b2bc99f3c3b08af", "imagePullPolicy": "IfNotPresent", "name": "ingress-operator", "resources": { "requests": { "cpu": "10m", "memory": "56Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:9393", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_RSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_CBC_SHA256,TLS_ECDHE_RSA_WITH_AES_128_CBC_SHA256", "--upstream=http://127.0.0.1:60000/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9393, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "metrics-tls", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "ingress-operator", "serviceAccountName": "ingress-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "metrics-tls", "secret": { "defaultMode": 420, "secretName": "metrics-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca" }, "name": "trusted-ca" }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T11:49:35Z", "generation": 1, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "5595df759", "pod-template-hash": "7cf79c7b9c" }, "name": "router-default-7cf79c7b9c", "namespace": "openshift-ingress", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "router-default", "uid": "4dfca1a2-79b5-4dd3-ba42-e8df392da776" } ], "resourceVersion": "47602", "uid": "553448b5-94fe-463c-a065-bb5443575893" }, "spec": { "minReadySeconds": 30, "replicas": 2, "selector": { "matchLabels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "pod-template-hash": "7cf79c7b9c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "ingresscontroller.operator.openshift.io/deployment-ingresscontroller": "default", "ingresscontroller.operator.openshift.io/hash": "5595df759", "pod-template-hash": "7cf79c7b9c" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "node.openshift.io/remote-worker", "operator": "NotIn", "values": [ "" ] } ] } ] } }, "podAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "NotIn", "values": [ "5595df759" ] } ] }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] }, "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/deployment-ingresscontroller", "operator": "In", "values": [ "default" ] }, { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "5595df759" ] } ] }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "env": [ { "name": "DEFAULT_CERTIFICATE_DIR", "value": "/etc/pki/tls/private" }, { "name": "DEFAULT_DESTINATION_CA_PATH", "value": "/var/run/configmaps/service-ca/service-ca.crt" }, { "name": "RELOAD_INTERVAL", "value": "5s" }, { "name": "ROUTER_ALLOW_WILDCARD_ROUTES", "value": "false" }, { "name": "ROUTER_CANONICAL_HOSTNAME", "value": "router-default.apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com" }, { "name": "ROUTER_CIPHERS", "value": "ECDHE-ECDSA-AES128-GCM-SHA256:ECDHE-RSA-AES128-GCM-SHA256:ECDHE-ECDSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-GCM-SHA384:ECDHE-ECDSA-CHACHA20-POLY1305:ECDHE-RSA-CHACHA20-POLY1305:DHE-RSA-AES128-GCM-SHA256:DHE-RSA-AES256-GCM-SHA384" }, { "name": "ROUTER_CIPHERSUITES", "value": "TLS_AES_128_GCM_SHA256:TLS_AES_256_GCM_SHA384:TLS_CHACHA20_POLY1305_SHA256" }, { "name": "ROUTER_DISABLE_HTTP2", "value": "true" }, { "name": "ROUTER_DISABLE_NAMESPACE_OWNERSHIP_CHECK", "value": "false" }, { "name": "ROUTER_DOMAIN", "value": "apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com" }, { "name": "ROUTER_IDLE_CLOSE_ON_RESPONSE", "value": "true" }, { "name": "ROUTER_LOAD_BALANCE_ALGORITHM", "value": "random" }, { "name": "ROUTER_METRICS_TLS_CERT_FILE", "value": "/etc/pki/tls/metrics-certs/tls.crt" }, { "name": "ROUTER_METRICS_TLS_KEY_FILE", "value": "/etc/pki/tls/metrics-certs/tls.key" }, { "name": "ROUTER_METRICS_TYPE", "value": "haproxy" }, { "name": "ROUTER_SERVICE_NAME", "value": "default" }, { "name": "ROUTER_SERVICE_NAMESPACE", "value": "openshift-ingress" }, { "name": "ROUTER_SET_FORWARDED_HEADERS", "value": "append" }, { "name": "ROUTER_TCP_BALANCE_SCHEME", "value": "source" }, { "name": "ROUTER_THREADS", "value": "4" }, { "name": "ROUTER_USE_PROXY_PROTOCOL", "value": "true" }, { "name": "SSL_MIN_VERSION", "value": "TLSv1.2" }, { "name": "STATS_PASSWORD_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsPassword" }, { "name": "STATS_PORT", "value": "1936" }, { "name": "STATS_USERNAME_FILE", "value": "/var/lib/haproxy/conf/metrics-auth/statsUsername" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56cfd08a2da5ddedbd9384b1bd6c2ead80a32d8761565973ae388ab8622356db", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "terminationGracePeriodSeconds": 10, "timeoutSeconds": 1 }, "name": "router", "ports": [ { "containerPort": 80, "name": "http", "protocol": "TCP" }, { "containerPort": 443, "name": "https", "protocol": "TCP" }, { "containerPort": 1936, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": true, "readOnlyRootFilesystem": false }, "startupProbe": { "failureThreshold": 120, "httpGet": { "path": "/healthz/ready", "port": 1936, "scheme": "HTTP" }, "periodSeconds": 1, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/private", "name": "default-certificate", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/lib/haproxy/conf/metrics-auth", "name": "stats-auth", "readOnly": true }, { "mountPath": "/etc/pki/tls/metrics-certs", "name": "metrics-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/worker": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "router", "serviceAccountName": "router", "terminationGracePeriodSeconds": 3600, "tolerations": [ { "effect": "NoExecute", "key": "kubernetes.io/e2e-evict-taint-key", "operator": "Equal", "value": "evictTaintVal" } ], "topologySpreadConstraints": [ { "labelSelector": { "matchExpressions": [ { "key": "ingresscontroller.operator.openshift.io/hash", "operator": "In", "values": [ "5595df759" ] } ] }, "maxSkew": 1, "topologyKey": "topology.kubernetes.io/zone", "whenUnsatisfiable": "ScheduleAnyway" } ], "volumes": [ { "name": "default-certificate", "secret": { "defaultMode": 420, "secretName": "router-certs-default" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "service-ca-bundle", "optional": false }, "name": "service-ca-bundle" }, { "name": "stats-auth", "secret": { "defaultMode": 420, "secretName": "router-stats-default" } }, { "name": "metrics-certs", "secret": { "defaultMode": 420, "secretName": "router-metrics-certs-default" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "Insights", "config.openshift.io/inject-proxy": "insights-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:34Z", "generation": 1, "labels": { "app": "insights-operator", "pod-template-hash": "579fb8b7cf" }, "name": "insights-operator-579fb8b7cf", "namespace": "openshift-insights", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "insights-operator", "uid": "1a394554-85f1-43ff-8aae-fc68b566fce4" } ], "resourceVersion": "37151", "uid": "58ea43ce-095e-4c3d-871e-8cd740df5a23" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "insights-operator", "pod-template-hash": "579fb8b7cf" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "insights-operator", "pod-template-hash": "579fb8b7cf" } }, "spec": { "containers": [ { "args": [ "start", "--config=/etc/insights-operator/server.yaml" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0731d6529a41a37327ec2900995db7054bc978fc2193cd26986807f3b8339565", "imagePullPolicy": "IfNotPresent", "name": "insights-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "54Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/lib/insights-operator", "name": "snapshots" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/configmaps/service-ca-bundle", "name": "service-ca-bundle", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator", "serviceAccountName": "operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 900 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 900 } ], "volumes": [ { "emptyDir": {}, "name": "snapshots" }, { "configMap": { "defaultMode": 420, "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "configMap": { "defaultMode": 420, "name": "service-ca-bundle", "optional": true }, "name": "service-ca-bundle" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "openshift-insights-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:29Z", "generation": 1, "labels": { "app": "kube-apiserver-operator", "pod-template-hash": "9f8857598" }, "name": "kube-apiserver-operator-9f8857598", "namespace": "openshift-kube-apiserver-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-apiserver-operator", "uid": "af59c8a2-7a96-4031-ab6d-9e4b915f78f7" } ], "resourceVersion": "37275", "uid": "cecf6d7d-bc8e-4356-84a1-8232a20740c3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-apiserver-operator", "pod-template-hash": "9f8857598" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-apiserver-operator", "pod-template-hash": "9f8857598" }, "name": "kube-apiserver-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-apiserver-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a7ce3813367a4a491bafbcb7d7a146ba2f0e60f985aa21d6fc859ea89868f81a" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.31.14" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9af63298f179cea3b0c2105ff2ca49b17c98a9742563e75d4b76590742f1b8fc", "imagePullPolicy": "IfNotPresent", "name": "kube-apiserver-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-apiserver-operator", "serviceAccountName": "kube-apiserver-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-apiserver-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-apiserver-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:13Z", "generation": 1, "labels": { "app": "kube-controller-manager-operator", "pod-template-hash": "5c765556df" }, "name": "kube-controller-manager-operator-5c765556df", "namespace": "openshift-kube-controller-manager-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-controller-manager-operator", "uid": "287b550b-9046-4899-b544-e6e6bd852a34" } ], "resourceVersion": "37064", "uid": "e8e5e03c-c353-4fb3-b6cf-098c26afa3ab" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-controller-manager-operator", "pod-template-hash": "5c765556df" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-controller-manager-operator", "pod-template-hash": "5c765556df" }, "name": "kube-controller-manager-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-controller-manager-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a7ce3813367a4a491bafbcb7d7a146ba2f0e60f985aa21d6fc859ea89868f81a" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cc731e6886cbb572231a4386515f6d473f00e8f7fceeb957bc97f1327154e3f7" }, { "name": "CLUSTER_POLICY_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:645aa8de5e2c867cf5508687943212cc84ac9ca3e5b289fdd57cf6267a6e1925" }, { "name": "TOOLS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd549121e9686d937298de79f1fa90eb6136489a692f5cd58135ed1c367514b" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.31.14" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:cc731e6886cbb572231a4386515f6d473f00e8f7fceeb957bc97f1327154e3f7", "imagePullPolicy": "IfNotPresent", "name": "kube-controller-manager-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-controller-manager-operator", "serviceAccountName": "kube-controller-manager-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-controller-manager-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-controller-manager-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:11Z", "generation": 1, "labels": { "app": "openshift-kube-scheduler-operator", "pod-template-hash": "64b68bc5b4" }, "name": "openshift-kube-scheduler-operator-64b68bc5b4", "namespace": "openshift-kube-scheduler-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-kube-scheduler-operator", "uid": "c8c44f5c-58e7-47cc-9085-3f9f5b49d1ac" } ], "resourceVersion": "37222", "uid": "62c2b8c6-efeb-498a-86fb-d5ccf4bc59a3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "openshift-kube-scheduler-operator", "pod-template-hash": "64b68bc5b4" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "openshift-kube-scheduler-operator", "pod-template-hash": "64b68bc5b4" }, "name": "openshift-kube-scheduler-operator" }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-scheduler-operator", "operator" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a7ce3813367a4a491bafbcb7d7a146ba2f0e60f985aa21d6fc859ea89868f81a" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5c10666cee9bc0acca9f97eada3e0fe8212d2f0d902ecf138b5dfa1dfa978ad6" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "1.31.14" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:5c10666cee9bc0acca9f97eada3e0fe8212d2f0d902ecf138b5dfa1dfa978ad6", "imagePullPolicy": "IfNotPresent", "name": "kube-scheduler-operator-container", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/kubernetes.io/serviceaccount", "name": "kube-api-access", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-kube-scheduler-operator", "serviceAccountName": "openshift-kube-scheduler-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node-role.kubernetes.io/control-plane", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "kube-scheduler-operator-serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "openshift-kube-scheduler-operator-config" }, "name": "config" }, { "name": "kube-api-access", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "expirationSeconds": 3600, "path": "token" } }, { "configMap": { "items": [ { "key": "ca.crt", "path": "ca.crt" } ], "name": "kube-root-ca.crt" } }, { "downwardAPI": { "items": [ { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" }, "path": "namespace" } ] } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T11:46:14Z", "generation": 1, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "68bb6fb478" }, "name": "kube-storage-version-migrator-operator-68bb6fb478", "namespace": "openshift-kube-storage-version-migrator-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-storage-version-migrator-operator", "uid": "0c710520-5d21-4b75-8b0b-3377fd5ab876" } ], "resourceVersion": "36800", "uid": "ab65cb98-aac1-416e-8dad-5126ffdfbc0c" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "68bb6fb478" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "kube-storage-version-migrator-operator", "pod-template-hash": "68bb6fb478" }, "name": "kube-storage-version-migrator-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml" ], "command": [ "cluster-kube-storage-version-migrator-operator", "start" ], "env": [ { "name": "IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:abc38d819fb95023240a5e61011c9eba104cdd77c4166c7a9331125a394e0cf0" }, { "name": "OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c9d156994ffa416f71bc194d2113c83c6d8a43aaefed8ed75fb6b5c3b968a930" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" }, { "name": "OPERAND_IMAGE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c9d156994ffa416f71bc194d2113c83c6d8a43aaefed8ed75fb6b5c3b968a930", "imagePullPolicy": "IfNotPresent", "name": "kube-storage-version-migrator-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-operator", "serviceAccountName": "kube-storage-version-migrator-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "d5981cd9ec343f73c66918f3ab30af553219721ba945cc13ca1405cddb5846dc" }, "creationTimestamp": "2026-04-28T11:49:03Z", "generation": 1, "labels": { "app": "migrator", "pod-template-hash": "55fcbbb95c" }, "name": "migrator-55fcbbb95c", "namespace": "openshift-kube-storage-version-migrator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "migrator", "uid": "ad4f8a85-116e-4487-adad-7e417eca4767" } ], "resourceVersion": "36580", "uid": "84b27623-456f-40a7-a1c7-c05478684d6f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "migrator", "pod-template-hash": "55fcbbb95c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "migrator", "pod-template-hash": "55fcbbb95c" } }, "spec": { "containers": [ { "args": [ "trap 'echo \"Termination signal received, but ignored. Continuing...\"; sleep infinity' TERM\nmigrator \"$@\" \u0026 wait $!", "bash", "--alsologtostderr", "--v=2" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:abc38d819fb95023240a5e61011c9eba104cdd77c4166c7a9331125a394e0cf0", "imagePullPolicy": "IfNotPresent", "name": "migrator", "resources": { "requests": { "cpu": "10m", "memory": "200Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "trap 'echo \"Gracefully sleeping for 25s to let another pod start...\"; sleep 25; exit' EXIT\nwhile true; do echo \"Waiting for termination...\"; sleep 3600 \u0026 wait $!; done" ], "command": [ "/bin/bash", "-c" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:abc38d819fb95023240a5e61011c9eba104cdd77c4166c7a9331125a394e0cf0", "imagePullPolicy": "IfNotPresent", "name": "graceful-termination", "resources": { "requests": { "cpu": "1m", "memory": "1Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsUser": 1001 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "kube-storage-version-migrator-sa", "serviceAccountName": "kube-storage-version-migrator-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:47:18Z", "generation": 1, "labels": { "k8s-app": "cluster-autoscaler-operator", "pod-template-hash": "67b49594d4" }, "name": "cluster-autoscaler-operator-67b49594d4", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-autoscaler-operator", "uid": "881463d2-c5c2-406c-a083-f31361cde796" } ], "resourceVersion": "37230", "uid": "2cd2cce5-a758-4925-9dd0-033e3cbe3f38" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cluster-autoscaler-operator", "pod-template-hash": "67b49594d4" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "cluster-autoscaler-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-autoscaler-operator", "pod-template-hash": "67b49594d4" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:9192", "--upstream=http://127.0.0.1:9191/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9192, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/private", "name": "cert", "readOnly": true } ] }, { "args": [ "-alsologtostderr" ], "command": [ "cluster-autoscaler-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CLUSTER_AUTOSCALER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "LEADER_ELECTION_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "CLUSTER_AUTOSCALER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9bcbf2b332b5db1552bb534e7050e4335f368744f0e3ab5331d710a17015eb67" }, { "name": "WEBHOOKS_CERT_DIR", "value": "/etc/cluster-autoscaler-operator/tls" }, { "name": "WEBHOOKS_PORT", "value": "8443" }, { "name": "METRICS_PORT", "value": "9191" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0581df96c4328edc621a5a994b9279d92fe4cacfc1194f498e7e976dd0ebd1a0", "imagePullPolicy": "IfNotPresent", "name": "cluster-autoscaler-operator", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cluster-autoscaler-operator/tls", "name": "cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-autoscaler-operator", "serviceAccountName": "cluster-autoscaler-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "cluster-autoscaler-operator-cert" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy-cluster-autoscaler-operator" }, "name": "auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:32Z", "generation": 1, "labels": { "k8s-app": "cluster-baremetal-operator", "pod-template-hash": "84bb864fd9" }, "name": "cluster-baremetal-operator-84bb864fd9", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-baremetal-operator", "uid": "550e4bd9-90d1-484c-b574-3640fffc91f3" } ], "resourceVersion": "37169", "uid": "f3eefe80-c005-4a9f-b38d-123e37045417" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "cluster-baremetal-operator", "pod-template-hash": "84bb864fd9" } }, "template": { "metadata": { "annotations": { "capability.openshift.io/name": "baremetal", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true", "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "cluster-baremetal-operator", "pod-template-hash": "84bb864fd9" } }, "spec": { "containers": [ { "args": [ "--enable-leader-election" ], "command": [ "/usr/bin/cluster-baremetal-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "METRICS_PORT", "value": "8080" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:401f3670f0612fcc011a1844eca8aa0f741f631e2ab91ba6e7d8d336739667cc", "imagePullPolicy": "IfNotPresent", "name": "cluster-baremetal-operator", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/cluster-baremetal-operator/tls", "name": "cert", "readOnly": true }, { "mountPath": "/etc/cluster-baremetal-operator/images", "name": "images", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--config-file=/etc/baremetal-kube-rbac-proxy/config-file.yaml", "--logtostderr=true", "--v=10" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "baremetal-kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/baremetal-kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "cluster-baremetal-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "cluster-baremetal-operator", "serviceAccountName": "cluster-baremetal-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "cert", "secret": { "defaultMode": 420, "secretName": "cluster-baremetal-webhook-server-cert" } }, { "configMap": { "defaultMode": 420, "name": "baremetal-kube-rbac-proxy" }, "name": "config" }, { "name": "cluster-baremetal-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-baremetal-operator-tls" } }, { "configMap": { "defaultMode": 420, "name": "cluster-baremetal-operator-images" }, "name": "images" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T11:47:12Z", "generation": 1, "labels": { "k8s-app": "control-plane-machine-set-operator", "pod-template-hash": "5d8fdd6568" }, "name": "control-plane-machine-set-operator-5d8fdd6568", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "control-plane-machine-set-operator", "uid": "f2692cb8-a0b9-48a6-ad2c-6300faab7017" } ], "resourceVersion": "36856", "uid": "10bb2fcf-974a-4842-be3a-4d0718935683" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "control-plane-machine-set-operator", "pod-template-hash": "5d8fdd6568" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "control-plane-machine-set-operator", "pod-template-hash": "5d8fdd6568" } }, "spec": { "containers": [ { "args": [ "-v=2", "--leader-elect=true", "--leader-elect-lease-duration=137s", "--leader-elect-renew-deadline=107s", "--leader-elect-retry-period=26s", "--leader-elect-resource-namespace=openshift-machine-api" ], "command": [ "/manager" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c185297f6a64af524e81d799f23f4973300e1477016b97bc568b341aa366fbff", "imagePullPolicy": "IfNotPresent", "name": "control-plane-machine-set-operator", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "control-plane-machine-set-operator-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "control-plane-machine-set-operator", "serviceAccountName": "control-plane-machine-set-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "control-plane-machine-set-operator-tls", "secret": { "defaultMode": 420, "secretName": "control-plane-machine-set-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "machine.openshift.io/owned": "", "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "b3aTLg==", "operator.openshift.io/spec-hash": "3abb3a6e1e244c4b6e2e8b1446654f6d552715235283af85d73cf7fb48e29be0" }, "creationTimestamp": "2026-04-28T11:50:06Z", "generation": 2, "labels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "55f579965" }, "name": "machine-api-controllers-55f579965", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-api-controllers", "uid": "6454dc6e-56af-474f-b30a-9c57edb5894e" } ], "resourceVersion": "42730", "uid": "eaeb21f5-70f0-4639-b7c5-38af4060387c" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "55f579965" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "b3aTLg==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "55f579965" } }, "spec": { "containers": [ { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,GCPLabelsTags=true,MachineAPIMigration=false,VSphereStaticIPs=true" ], "command": [ "/machineset-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "machineset-controller", "ports": [ { "containerPort": 8443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 9441, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/machine-api-operator/tls", "name": "machineset-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,GCPLabelsTags=true,MachineAPIMigration=false,VSphereStaticIPs=true" ], "command": [ "/machine-controller-manager" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0579bee1e5bb7e6e05cb578b0662539a485cb68cf362c18fcba7c034b1f2403f", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-controller", "ports": [ { "containerPort": 8440, "name": "machine-webhook", "protocol": "TCP" }, { "containerPort": 9440, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/etc/machine-api-operator/tls", "name": "machine-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/nodelink-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "name": "nodelink-controller", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/machine-healthcheck" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-healthcheck-controller", "ports": [ { "containerPort": 9442, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:8442", "--upstream=http://localhost:8082", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machineset-mtrc", "ports": [ { "containerPort": 8442, "name": "machineset-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8441", "--upstream=http://localhost:8081", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machine-mtrc", "ports": [ { "containerPort": 8441, "name": "machine-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8444", "--upstream=http://localhost:8083", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-mhc-mtrc", "ports": [ { "containerPort": 8444, "name": "mhc-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-controllers", "serviceAccountName": "machine-api-controllers", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master" }, { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "machineset-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-webhook-cert" } }, { "name": "machine-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-machine-webhook-cert" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "config" }, { "name": "machine-api-controllers-tls", "secret": { "defaultMode": 420, "secretName": "machine-api-controllers-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "mao-trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2", "machine.openshift.io/owned": "", "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "NRe5ig==", "operator.openshift.io/spec-hash": "ed9a3e568c112730c96b7f5ac0f5217eb09066241e03c5d7e1ac33bb4fa8dd09" }, "creationTimestamp": "2026-04-28T12:58:39Z", "generation": 1, "labels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "67c5594bb6" }, "name": "machine-api-controllers-67c5594bb6", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-api-controllers", "uid": "6454dc6e-56af-474f-b30a-9c57edb5894e" } ], "resourceVersion": "42680", "uid": "d00e901f-8349-409c-9e8c-a076f7a01585" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "67c5594bb6" } }, "template": { "metadata": { "annotations": { "operator.openshift.io/dep-openshift-machine-api.mao-trusted-ca.configmap": "NRe5ig==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "api": "clusterapi", "k8s-app": "controller", "pod-template-hash": "67c5594bb6" } }, "spec": { "containers": [ { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,GCPLabelsTags=true,MachineAPIMigration=false,VSphereStaticIPs=true" ], "command": [ "/machineset-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "machineset-controller", "ports": [ { "containerPort": 8443, "name": "webhook-server", "protocol": "TCP" }, { "containerPort": 9441, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/machine-api-operator/tls", "name": "machineset-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api", "--feature-gates=AzureWorkloadIdentity=true,GCPLabelsTags=true,MachineAPIMigration=false,VSphereStaticIPs=true" ], "command": [ "/machine-controller-manager" ], "env": [ { "name": "NODE_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0579bee1e5bb7e6e05cb578b0662539a485cb68cf362c18fcba7c034b1f2403f", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-controller", "ports": [ { "containerPort": 8440, "name": "machine-webhook", "protocol": "TCP" }, { "containerPort": 9440, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "trusted-ca", "readOnly": true }, { "mountPath": "/var/run/secrets/openshift/serviceaccount", "name": "bound-sa-token", "readOnly": true }, { "mountPath": "/etc/machine-api-operator/tls", "name": "machine-webhook-cert", "readOnly": true } ] }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/nodelink-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "name": "nodelink-controller", "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--logtostderr=true", "--v=3", "--leader-elect=true", "--leader-elect-lease-duration=120s", "--namespace=openshift-machine-api" ], "command": [ "/machine-healthcheck" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "machine-healthcheck-controller", "ports": [ { "containerPort": 9442, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "healthz", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:8442", "--upstream=http://localhost:8082", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machineset-mtrc", "ports": [ { "containerPort": 8442, "name": "machineset-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8441", "--upstream=http://localhost:8081", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-machine-mtrc", "ports": [ { "containerPort": 8441, "name": "machine-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8444", "--upstream=http://localhost:8083", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-mhc-mtrc", "ports": [ { "containerPort": 8444, "name": "mhc-mtrc", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-controllers-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-controllers", "serviceAccountName": "machine-api-controllers", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master" }, { "key": "CriticalAddonsOnly", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "machineset-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-webhook-cert" } }, { "name": "machine-webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "machine-api-operator-machine-webhook-cert" } }, { "name": "bound-sa-token", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "openshift", "expirationSeconds": 3600, "path": "token" } } ] } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "config" }, { "name": "machine-api-controllers-tls", "secret": { "defaultMode": 420, "secretName": "machine-api-controllers-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "mao-trusted-ca", "optional": true }, "name": "trusted-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:33Z", "generation": 1, "labels": { "k8s-app": "machine-api-operator", "pod-template-hash": "6b858f847c" }, "name": "machine-api-operator-6b858f847c", "namespace": "openshift-machine-api", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-api-operator", "uid": "33626fba-858e-4495-81b5-7ec7483d1fd0" } ], "resourceVersion": "37263", "uid": "20c9368d-72d4-4418-a944-f60c0fb9ed5b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "machine-api-operator", "pod-template-hash": "6b858f847c" } }, "template": { "metadata": { "annotations": { "capability.openshift.io/name": "MachineAPI", "kubectl.kubernetes.io/default-container": "machine-api-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-api-operator", "pod-template-hash": "6b858f847c" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--logtostderr=true", "--v=3" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kube-rbac-proxy", "name": "config" }, { "mountPath": "/etc/tls/private", "name": "machine-api-operator-tls" } ] }, { "args": [ "start", "--images-json=/etc/machine-api-operator-config/images/images.json", "--alsologtostderr", "--v=3" ], "command": [ "/machine-api-operator" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "COMPONENT_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "METRICS_PORT", "value": "8080" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c028f89cc0eb4a4ef2c6cafb31fca86a32ab0796c1b071938033c2167a0f1160", "imagePullPolicy": "IfNotPresent", "name": "machine-api-operator", "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/machine-api-operator-config/images", "name": "images" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-api-operator", "serviceAccountName": "machine-api-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "machine-api-operator-images" }, "name": "images" }, { "name": "machine-api-operator-tls", "secret": { "defaultMode": 420, "secretName": "machine-api-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T11:50:10Z", "generation": 1, "labels": { "k8s-app": "machine-config-controller", "pod-template-hash": "8655977549" }, "name": "machine-config-controller-8655977549", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-config-controller", "uid": "b4d76479-4400-49bd-a967-002bf0f9e693" } ], "resourceVersion": "36806", "uid": "0b5877d5-f7ac-437e-8659-d77dc0d7487d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "machine-config-controller", "pod-template-hash": "8655977549" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-config-controller", "pod-template-hash": "8655977549" } }, "spec": { "containers": [ { "args": [ "start", "--resourcelock-namespace=openshift-machine-config-operator", "--v=2", "--payload-version=4.18.31" ], "command": [ "/usr/bin/machine-config-controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2655c75a468e61f5206cf2126af6a30159c581757656352490a8378113262df7", "imagePullPolicy": "IfNotPresent", "name": "machine-config-controller", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9001", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--tls-min-version=VersionTLS12", "--upstream=http://127.0.0.1:8797", "--logtostderr=true", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9001, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "proxy-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "mcc-auth-proxy-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "machine-config-controller", "serviceAccountName": "machine-config-controller", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "proxy-tls", "secret": { "defaultMode": 420, "secretName": "mcc-proxy-tls" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "mcc-auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "exclude.release.openshift.io/internal-openshift-hosted": "true", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:32Z", "generation": 1, "labels": { "k8s-app": "machine-config-operator", "pod-template-hash": "64cdc6c9df" }, "name": "machine-config-operator-64cdc6c9df", "namespace": "openshift-machine-config-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "machine-config-operator", "uid": "76d0424a-cd57-47e5-8475-40d9c07b0953" } ], "resourceVersion": "37207", "uid": "f1c6a9a6-4b69-41cf-9495-cde5be96b437" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "k8s-app": "machine-config-operator", "pod-template-hash": "64cdc6c9df" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "anyuid", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "k8s-app": "machine-config-operator", "pod-template-hash": "64cdc6c9df" } }, "spec": { "containers": [ { "args": [ "start", "--images-json=/etc/mco/images/images.json", "--payload-version=4.18.31", "--operator-image=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2655c75a468e61f5206cf2126af6a30159c581757656352490a8378113262df7" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:2655c75a468e61f5206cf2126af6a30159c581757656352490a8378113262df7", "imagePullPolicy": "IfNotPresent", "name": "machine-config-operator", "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/mco/images", "name": "images" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9001", "--config-file=/etc/kube-rbac-proxy/config-file.yaml", "--tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:8797", "--logtostderr=true", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9001, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "20m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "proxy-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "auth-proxy-config" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "machine-config-operator", "serviceAccountName": "machine-config-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "machine-config-operator-images" }, "name": "images" }, { "name": "proxy-tls", "secret": { "defaultMode": 420, "secretName": "mco-proxy-tls" } }, { "configMap": { "defaultMode": 420, "name": "kube-rbac-proxy" }, "name": "auth-proxy-config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "marketplace", "config.openshift.io/inject-proxy": "marketplace-operator", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:16Z", "generation": 1, "labels": { "name": "marketplace-operator", "pod-template-hash": "7ff5cfb869" }, "name": "marketplace-operator-7ff5cfb869", "namespace": "openshift-marketplace", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "marketplace-operator", "uid": "95b6bc78-3dca-4564-be43-641c13b8c5df" } ], "resourceVersion": "48717", "uid": "dbf55be1-6b91-4bf3-a711-01734ff3b5c0" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "marketplace-operator", "pod-template-hash": "7ff5cfb869" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "marketplace-operator", "pod-template-hash": "7ff5cfb869" } }, "spec": { "containers": [ { "args": [ "-defaultsDir=/defaults", "-clusterOperatorName=marketplace", "-tls-cert", "/var/run/secrets/serving-cert/tls.crt", "-tls-key", "/var/run/secrets/serving-cert/tls.key" ], "command": [ "marketplace-operator" ], "env": [ { "name": "WATCH_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "marketplace-operator" }, { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "GOMEMLIMIT", "value": "5MiB" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:69599b7871ef7ff9bb31fc260ce0705ef788186679b93220a2becf3d668d2e50", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "marketplace-operator", "ports": [ { "containerPort": 60000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8080, "name": "healthz", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "5Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "marketplace-trusted-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "marketplace-operator-metrics" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "marketplace-operator", "serviceAccountName": "marketplace-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "marketplace-trusted-ca", "optional": true }, "name": "marketplace-trusted-ca" }, { "name": "marketplace-operator-metrics", "secret": { "defaultMode": 420, "secretName": "marketplace-operator-metrics" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:28Z", "generation": 1, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "pod-template-hash": "6f86566768" }, "name": "cluster-monitoring-operator-6f86566768", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cluster-monitoring-operator", "uid": "f72f7a2b-7ee8-44a0-9094-86a3af24cada" } ], "resourceVersion": "37055", "uid": "06d3fb53-6e3f-49e1-88b0-61c0e0bc2eb1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "cluster-monitoring-operator", "pod-template-hash": "6f86566768" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "cluster-monitoring-operator", "app.kubernetes.io/name": "cluster-monitoring-operator", "pod-template-hash": "6f86566768" } }, "spec": { "containers": [ { "args": [ "-namespace=openshift-monitoring", "-namespace-user-workload=openshift-user-workload-monitoring", "-configmap=cluster-monitoring-config", "-release-version=$(RELEASE_VERSION)", "-v=2", "-cert-file=/etc/tls/private/tls.crt", "-key-file=/etc/tls/private/tls.key", "-images=prometheus-operator=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0318fb80da3c22fd80da5709561afde6a1ca658eb10f2e0ca6a63c66273c296f", "-images=prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3c861e6801e61cfacc24e9699133ceab5897304e65d5c22c4cf2f5f0eca4fd2f", "-images=prometheus-operator-admission-webhook=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ee2f59a16f881ad171ca03c4db0014b928eeec08258eb004386f96506d00ca2c", "-images=configmap-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0192a498c468d06dbed41695503b97555d040126b8c37b4aa4c85608fd2cc22d", "-images=prometheus=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:f5131b86a8331debff38f428525511d6264ede08d28d75b94fd85c3f2692711d", "-images=alertmanager=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0bfb2bc68ec2e945ce1657fb60b53c0f9e8efa4a2ccb6dfa455fd1a41e144bc1", "-images=node-exporter=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:6b4f2baf26c245fe536b98e5948ace14668e17bf55cea67de9895aa87d39b8b7", "-images=kube-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:04e90d4eeab663964a92b253bfe85064ddf9568e07f0d57ea7aa35ec415e6f8d", "-images=openshift-state-metrics=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e60aeeba7713e21b90d245a55d617296ffe0603cd9b23ed0d5e2d4dd990c3a31", "-images=kube-rbac-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "-images=telemeter-client=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:861aaa1165d4664df2a3b548e569362a41127573205b26b9cf608a9fc2119ee5", "-images=prom-label-proxy=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b102a969e184da2bf098d33442c6a4f8a6ee130d4a0ea7f26452427447105e2a", "-images=thanos=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d3cb7fece0a7bf309c52ca2e47e6ec7bb1c0ee556a37834f3df6fe1ae08610e0", "-images=monitoring-plugin=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a00a16c6ae8f45e06432da8a7100a9c08bc48eeaa048e454d10bdff1df7f0c2a", "-images=kube-metrics-server=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b79d26eab1465065bd1cc952236154ebc6c203aaa45a23c92aa903e69daf31c6" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:8eca7d2a38b3671aa2a4ab1642d2ab1c3c865b827d084fbfb12594d753f1ca52", "imagePullPolicy": "IfNotPresent", "name": "cluster-monitoring-operator", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "75Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "cluster-monitoring-operator-tls", "readOnly": true }, { "mountPath": "/etc/cluster-monitoring-operator/telemetry", "name": "telemetry-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "cluster-monitoring-operator", "serviceAccountName": "cluster-monitoring-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node.kubernetes.io/memory-pressure", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemetry-config" }, "name": "telemetry-config" }, { "name": "cluster-monitoring-operator-tls", "secret": { "defaultMode": 420, "secretName": "cluster-monitoring-operator-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T11:59:13Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.13.0", "pod-template-hash": "5c46d6fcdc" }, "name": "kube-state-metrics-5c46d6fcdc", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "kube-state-metrics", "uid": "131268f6-817f-44e3-ab30-306a62461c43" } ], "resourceVersion": "23137", "uid": "084d3132-a76e-43e8-9e5b-388c3785d626" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5c46d6fcdc" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "kube-state-metrics", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "kube-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "2.13.0", "pod-template-hash": "5c46d6fcdc" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082", "--metric-denylist=\n^kube_secret_labels$,\n^kube_.+_annotations$,\n^kube_customresource_.+_annotations_info$,\n^kube_customresource_.+_labels_info$\n", "--metric-labels-allowlist=pods=[*],nodes=[*],namespaces=[*],persistentvolumes=[*],persistentvolumeclaims=[*],poddisruptionbudgets=[*]", "--metric-denylist=\n^kube_.+_created$,\n^kube_.+_metadata_resource_version$,\n^kube_replicaset_metadata_generation$,\n^kube_replicaset_status_observed_generation$,\n^kube_pod_restart_policy$,\n^kube_pod_init_container_status_terminated$,\n^kube_pod_init_container_status_running$,\n^kube_pod_container_status_terminated$,\n^kube_pod_container_status_running$,\n^kube_pod_completion_time$,\n^kube_pod_status_scheduled$\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:04e90d4eeab663964a92b253bfe85064ddf9568e07f0d57ea7aa35ec415e6f8d", "imagePullPolicy": "IfNotPresent", "name": "kube-state-metrics", "resources": { "requests": { "cpu": "2m", "memory": "80Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "volume-directive-shadow" }, { "mountPath": "/etc/kube-state-metrics", "name": "kube-state-metrics-custom-resource-state-configmap", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-state-metrics-tls" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca" }, { "mountPath": "/etc/kube-rbac-policy", "name": "kube-state-metrics-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "kube-state-metrics", "serviceAccountName": "kube-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "volume-directive-shadow" }, { "name": "kube-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-tls" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "kube-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "kube-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "kube-state-metrics-custom-resource-state-configmap" }, "name": "kube-state-metrics-custom-resource-state-configmap" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T11:59:19Z", "generation": 1, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "64c84f88db" }, "name": "metrics-server-64c84f88db", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "metrics-server", "uid": "1f28142f-9d15-4caa-a619-9394991f9e50" } ], "resourceVersion": "36729", "uid": "9cf01ff4-c5cb-4e94-98a7-dc0ca4d998ba" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "64c84f88db" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/kubelet-serving-ca-bundle-hash": "16ojhqd0pc2c0", "monitoring.openshift.io/metrics-client-cert-hash": "cguognl2hnb84", "monitoring.openshift.io/serving-ca-secret-hash": "9rke044o9vfrp", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "64c84f88db" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "metrics-server", "app.kubernetes.io/name": "metrics-server", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--secure-port=10250", "--kubelet-preferred-address-types=InternalIP,ExternalIP,Hostname", "--kubelet-use-node-status-port", "--metric-resolution=15s", "--kubelet-certificate-authority=/etc/tls/kubelet-serving-ca-bundle/ca-bundle.crt", "--kubelet-client-certificate=/etc/tls/metrics-client-certs/tls.crt", "--kubelet-client-key=/etc/tls/metrics-client-certs/tls.key", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--shutdown-send-retry-after=true", "--shutdown-delay-duration=150s", "--disable-http2-serving=true", "--tls-min-version=VersionTLS12", "--client-ca-file=/etc/client-ca-bundle/client-ca-file", "--requestheader-client-ca-file=/etc/client-ca-bundle/requestheader-client-ca-file", "--requestheader-allowed-names=kube-apiserver-proxy,system:kube-apiserver-proxy,system:openshift-aggregator", "--requestheader-extra-headers-prefix=X-Remote-Extra-", "--requestheader-group-headers=X-Remote-Group", "--requestheader-username-headers=X-Remote-User", "--audit-policy-file=/etc/audit/metadata-profile.yaml", "--audit-log-path=/var/log/metrics-server/audit.log", "--audit-log-maxsize=100", "--audit-log-maxbackup=5", "--audit-log-compress=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b79d26eab1465065bd1cc952236154ebc6c203aaa45a23c92aa903e69daf31c6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/livez", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "metrics-server", "ports": [ { "containerPort": 10250, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 6, "httpGet": { "path": "/readyz", "port": "https", "scheme": "HTTPS" }, "initialDelaySeconds": 20, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-metrics-server-tls" }, { "mountPath": "/etc/tls/metrics-client-certs", "name": "secret-metrics-client-certs" }, { "mountPath": "/etc/tls/kubelet-serving-ca-bundle", "name": "configmap-kubelet-serving-ca-bundle" }, { "mountPath": "/etc/audit", "name": "metrics-server-audit-profiles", "readOnly": true }, { "mountPath": "/var/log/metrics-server", "name": "audit-log" }, { "mountPath": "/etc/client-ca-bundle", "name": "client-ca-bundle", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "metrics-server", "serviceAccountName": "metrics-server", "terminationGracePeriodSeconds": 170, "volumes": [ { "name": "secret-metrics-client-certs", "secret": { "defaultMode": 420, "secretName": "metrics-client-certs" } }, { "name": "secret-metrics-server-tls", "secret": { "defaultMode": 420, "secretName": "metrics-server-tls" } }, { "configMap": { "defaultMode": 420, "name": "kubelet-serving-ca-bundle" }, "name": "configmap-kubelet-serving-ca-bundle" }, { "emptyDir": {}, "name": "audit-log" }, { "configMap": { "defaultMode": 420, "name": "metrics-server-audit-profiles" }, "name": "metrics-server-audit-profiles" }, { "name": "client-ca-bundle", "secret": { "defaultMode": 420, "secretName": "metrics-server-bnv9mbbpd771h" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T11:59:19Z", "generation": 1, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "b6f4658bc" }, "name": "monitoring-plugin-b6f4658bc", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "monitoring-plugin", "uid": "3b1a9560-24fe-4c74-9786-c48b443fb102" } ], "resourceVersion": "41726", "uid": "15b29433-b24b-4dbe-9486-cacc8f8673ca" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "b6f4658bc" } }, "template": { "metadata": { "annotations": { "monitoring.openshift.io/cert-hash": "e9qb4j4jjgdn2", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "b6f4658bc" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "monitoring-plugin", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "monitoring-plugin", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "-config-path=/opt/app-root/web/dist", "-static-path=/opt/app-root/web/dist", "-cert=/var/cert/tls.crt", "-key=/var/cert/tls.key" ], "command": [ "/opt/app-root/plugin-backend" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a00a16c6ae8f45e06432da8a7100a9c08bc48eeaa048e454d10bdff1df7f0c2a", "imagePullPolicy": "IfNotPresent", "name": "monitoring-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "monitoring-plugin-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "monitoring-plugin-cert", "secret": { "defaultMode": 420, "secretName": "monitoring-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T11:59:13Z", "generation": 1, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7b55b444b7" }, "name": "openshift-state-metrics-7b55b444b7", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-state-metrics", "uid": "e0fc20cc-bb51-409d-9f58-59cc380a6bf7" } ], "resourceVersion": "23247", "uid": "33141f51-258d-4d8c-84db-2bfe541431ad" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/name": "openshift-state-metrics", "pod-template-hash": "7b55b444b7" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "exporter", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "openshift-state-metrics", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7b55b444b7" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8081/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-main", "ports": [ { "containerPort": 8443, "name": "https-main", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--secure-listen-address=:9443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://127.0.0.1:8082/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-self", "ports": [ { "containerPort": 9443, "name": "https-self", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "openshift-state-metrics-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "openshift-state-metrics-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] }, { "args": [ "--host=127.0.0.1", "--port=8081", "--telemetry-host=127.0.0.1", "--telemetry-port=8082" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e60aeeba7713e21b90d245a55d617296ffe0603cd9b23ed0d5e2d4dd990c3a31", "imagePullPolicy": "IfNotPresent", "name": "openshift-state-metrics", "resources": { "requests": { "cpu": "1m", "memory": "32Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "openshift-state-metrics", "serviceAccountName": "openshift-state-metrics", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "openshift-state-metrics-tls", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-tls" } }, { "name": "openshift-state-metrics-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "openshift-state-metrics-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T11:58:45Z", "generation": 1, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "646dd47bc7" }, "name": "prometheus-operator-646dd47bc7", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator", "uid": "be7789e5-a761-4d4f-966d-92084018cf50" } ], "resourceVersion": "22645", "uid": "1ba9562c-4c8e-4920-bc73-6fa9085d9a66" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "646dd47bc7" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "646dd47bc7" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "--kubelet-service=kube-system/kubelet", "--prometheus-config-reloader=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3c861e6801e61cfacc24e9699133ceab5897304e65d5c22c4cf2f5f0eca4fd2f", "--kubelet-endpoints=true", "--kubelet-endpointslice=false", "--watch-referenced-objects-in-all-namespaces=true", "--prometheus-instance-namespaces=openshift-monitoring", "--thanos-ruler-instance-namespaces=openshift-monitoring", "--alertmanager-instance-namespaces=openshift-monitoring", "--config-reloader-cpu-limit=0", "--config-reloader-memory-limit=0", "--config-reloader-cpu-request=1m", "--config-reloader-memory-request=10Mi", "--web.listen-address=127.0.0.1:8080", "--controller-id=openshift-monitoring/prometheus-operator" ], "env": [ { "name": "GOGC", "value": "30" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:0318fb80da3c22fd80da5709561afde6a1ca658eb10f2e0ca6a63c66273c296f", "imagePullPolicy": "IfNotPresent", "name": "prometheus-operator", "resources": { "requests": { "cpu": "5m", "memory": "150Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--upstream=http://localhost:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--client-ca-file=/etc/tls/client/client-ca.crt", "--config-file=/etc/kube-rbac-policy/config.yaml", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "prometheus-operator-tls", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true }, { "mountPath": "/etc/kube-rbac-policy", "name": "prometheus-operator-kube-rbac-proxy-config", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator", "serviceAccountName": "prometheus-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "prometheus-operator-tls", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-tls" } }, { "name": "prometheus-operator-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "prometheus-operator-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T11:50:07Z", "generation": 1, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "6977f9d758" }, "name": "prometheus-operator-admission-webhook-6977f9d758", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "prometheus-operator-admission-webhook", "uid": "b5fe61a9-3bef-4946-b7a7-e823138c522f" } ], "resourceVersion": "45816", "uid": "aafe2034-29d9-48dc-ae3e-462ef855b9ed" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "6977f9d758" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "prometheus-operator-admission-webhook", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.78.1", "pod-template-hash": "6977f9d758" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "prometheus-operator-admission-webhook", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "namespaces": [ "openshift-monitoring" ], "topologyKey": "kubernetes.io/hostname" } ] } }, "automountServiceAccountToken": false, "containers": [ { "args": [ "--web.enable-tls=true", "--web.cert-file=/etc/tls/private/tls.crt", "--web.key-file=/etc/tls/private/tls.key", "--web.tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--web.tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ee2f59a16f881ad171ca03c4db0014b928eeec08258eb004386f96506d00ca2c", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "prometheus-operator-admission-webhook", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "https", "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "5m", "memory": "30Mi" } }, "securityContext": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "tls-certificates", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "prometheus-operator-admission-webhook", "serviceAccountName": "prometheus-operator-admission-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls-certificates", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "prometheus-operator-admission-webhook-tls" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-28T12:58:07Z", "generation": 1, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5bd95b75f6" }, "name": "telemeter-client-5bd95b75f6", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "telemeter-client", "uid": "40a77781-9ab3-4fc7-abfd-b9d57d5a77f3" } ], "resourceVersion": "40306", "uid": "b2587941-18e0-4d8f-96cf-258c001e85b9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/name": "telemeter-client", "pod-template-hash": "5bd95b75f6" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}", "telemeter-token-hash": "15goceamu8hbo" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "5bd95b75f6" } }, "spec": { "containers": [ { "command": [ "/usr/bin/telemeter-client", "--id=$(ID)", "--from=$(FROM)", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt", "--from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--to=$(TO)", "--to-token-file=/etc/telemeter/token", "--listen=localhost:8080", "--anonymize-salt-file=/etc/telemeter/salt", "--anonymize-labels=$(ANONYMIZE_LABELS)", "--match={__name__=~\"cluster:usage:.*\"}", "--match={__name__=\"count:up0\"}", "--match={__name__=\"count:up1\"}", "--match={__name__=\"cluster_version\"}", "--match={__name__=\"cluster_version_available_updates\"}", "--match={__name__=\"cluster_version_capability\"}", "--match={__name__=\"cluster_operator_up\"}", "--match={__name__=\"cluster_operator_conditions\"}", "--match={__name__=\"cluster_version_payload\"}", "--match={__name__=\"cluster_installer\"}", "--match={__name__=\"cluster_infrastructure_provider\"}", "--match={__name__=\"cluster_feature_set\"}", "--match={__name__=\"instance:etcd_object_counts:sum\"}", "--match={__name__=\"ALERTS\",alertstate=\"firing\",severity=~\"critical|warning|info|none\"}", "--match={__name__=\"code:apiserver_request_total:rate:sum\"}", "--match={__name__=\"cluster:capacity_cpu_cores:sum\"}", "--match={__name__=\"cluster:capacity_memory_bytes:sum\"}", "--match={__name__=\"cluster:cpu_usage_cores:sum\"}", "--match={__name__=\"cluster:memory_usage_bytes:sum\"}", "--match={__name__=\"openshift:cpu_usage_cores:sum\"}", "--match={__name__=\"openshift:memory_usage_bytes:sum\"}", "--match={__name__=\"workload:cpu_usage_cores:sum\"}", "--match={__name__=\"workload:memory_usage_bytes:sum\"}", "--match={__name__=\"cluster:virt_platform_nodes:sum\"}", "--match={__name__=\"cluster:node_instance_type_count:sum\"}", "--match={__name__=\"cnv:vmi_status_running:count\"}", "--match={__name__=\"cnv_abnormal\", reason=~\"memory_working_set_delta_from_request|memory_rss_delta_from_request\"}", "--match={__name__=\"cluster:vmi_request_cpu_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_sockets:sum\"}", "--match={__name__=\"subscription_sync_total\"}", "--match={__name__=\"olm_resolution_duration_seconds\"}", "--match={__name__=\"csv_succeeded\"}", "--match={__name__=\"csv_abnormal\"}", "--match={__name__=\"cluster:kube_persistentvolumeclaim_resource_requests_storage_bytes:provisioner:sum\"}", "--match={__name__=\"cluster:kubelet_volume_stats_used_bytes:provisioner:sum\"}", "--match={__name__=\"ceph_cluster_total_bytes\"}", "--match={__name__=\"ceph_cluster_total_used_raw_bytes\"}", "--match={__name__=\"ceph_health_status\"}", "--match={__name__=\"odf_system_raw_capacity_total_bytes\"}", "--match={__name__=\"odf_system_raw_capacity_used_bytes\"}", "--match={__name__=\"odf_system_health_status\"}", "--match={__name__=\"job:ceph_osd_metadata:count\"}", "--match={__name__=\"job:kube_pv:count\"}", "--match={__name__=\"job:odf_system_pvs:count\"}", "--match={__name__=\"job:ceph_pools_iops:total\"}", "--match={__name__=\"job:ceph_pools_iops_bytes:total\"}", "--match={__name__=\"job:ceph_versions_running:count\"}", "--match={__name__=\"job:noobaa_total_unhealthy_buckets:sum\"}", "--match={__name__=\"job:noobaa_bucket_count:sum\"}", "--match={__name__=\"job:noobaa_total_object_count:sum\"}", "--match={__name__=\"odf_system_bucket_count\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"odf_system_objects_total\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"noobaa_accounts_num\"}", "--match={__name__=\"noobaa_total_usage\"}", "--match={__name__=\"console_url\"}", "--match={__name__=\"cluster:console_auth_login_requests_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_successes_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_failures_total:sum\"}", "--match={__name__=\"cluster:console_auth_logout_requests_total:sum\"}", "--match={__name__=\"cluster:console_usage_users:max\"}", "--match={__name__=\"cluster:console_plugins_info:max\"}", "--match={__name__=\"cluster:console_customization_perspectives_info:max\"}", "--match={__name__=\"cluster:ovnkube_controller_egress_routing_via_host:max\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Pass|Allow|Deny\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Allow|Deny\"}", "--match={__name__=\"cluster:network_attachment_definition_instances:max\"}", "--match={__name__=\"cluster:network_attachment_definition_enabled_instance_up:max\"}", "--match={__name__=\"cluster:ingress_controller_aws_nlb_active:sum\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:min\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:max\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:avg\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:median\"}", "--match={__name__=\"cluster:openshift_route_info:tls_termination:sum\"}", "--match={__name__=\"insightsclient_request_send_total\"}", "--match={__name__=\"cam_app_workload_migrations\"}", "--match={__name__=\"cluster:apiserver_current_inflight_requests:sum:max_over_time:2m\"}", "--match={__name__=\"cluster:alertmanager_integrations:max\"}", "--match={__name__=\"cluster:telemetry_selected_series:count\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_series:sum\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_samples_appended_total:sum\"}", "--match={__name__=\"monitoring:container_memory_working_set_bytes:sum\"}", "--match={__name__=\"namespace_job:scrape_series_added:topk3_sum1h\"}", "--match={__name__=\"namespace_job:scrape_samples_post_metric_relabeling:topk3\"}", "--match={__name__=\"monitoring:haproxy_server_http_responses_total:sum\"}", "--match={__name__=\"profile:cluster_monitoring_operator_collection_profile:max\"}", "--match={__name__=\"vendor_model:node_accelerator_cards:sum\",vendor=~\"NVIDIA|AMD|GAUDI|INTEL|QUALCOMM\"}", "--match={__name__=\"rhmi_status\"}", "--match={__name__=\"status:upgrading:version:rhoam_state:max\"}", "--match={__name__=\"state:rhoam_critical_alerts:max\"}", "--match={__name__=\"state:rhoam_warning_alerts:max\"}", "--match={__name__=\"rhoam_7d_slo_percentile:max\"}", "--match={__name__=\"rhoam_7d_slo_remaining_error_budget:max\"}", "--match={__name__=\"cluster_legacy_scheduler_policy\"}", "--match={__name__=\"cluster_master_schedulable\"}", "--match={__name__=\"che_workspace_status\"}", "--match={__name__=\"che_workspace_started_total\"}", "--match={__name__=\"che_workspace_failure_total\"}", "--match={__name__=\"che_workspace_start_time_seconds_sum\"}", "--match={__name__=\"che_workspace_start_time_seconds_count\"}", "--match={__name__=\"cco_credentials_mode\"}", "--match={__name__=\"cluster:kube_persistentvolume_plugin_type_counts:sum\"}", "--match={__name__=\"acm_managed_cluster_info\"}", "--match={__name__=\"acm_managed_cluster_worker_cores:max\"}", "--match={__name__=\"acm_console_page_count:sum\", page=~\"overview-classic|overview-fleet|search|search-details|clusters|application|governance\"}", "--match={__name__=\"cluster:vsphere_vcenter_info:sum\"}", "--match={__name__=\"cluster:vsphere_esxi_version_total:sum\"}", "--match={__name__=\"cluster:vsphere_node_hw_version_total:sum\"}", "--match={__name__=\"openshift:build_by_strategy:sum\"}", "--match={__name__=\"rhods_aggregate_availability\"}", "--match={__name__=\"rhods_total_users\"}", "--match={__name__=\"instance:etcd_disk_wal_fsync_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_network_peer_round_trip_time_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_use_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_disk_backend_commit_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"jaeger_operator_instances_storage_types\"}", "--match={__name__=\"jaeger_operator_instances_strategies\"}", "--match={__name__=\"jaeger_operator_instances_agent_strategies\"}", "--match={__name__=\"type:tempo_operator_tempostack_storage_backend:sum\",type=~\"azure|gcs|s3\"}", "--match={__name__=\"state:tempo_operator_tempostack_managed:sum\",state=~\"Managed|Unmanaged\"}", "--match={__name__=\"type:tempo_operator_tempostack_multi_tenancy:sum\",type=~\"enabled|disabled\"}", "--match={__name__=\"enabled:tempo_operator_tempostack_jaeger_ui:sum\",enabled=~\"true|false\"}", "--match={__name__=\"type:opentelemetry_collector_receivers:sum\",type=~\"jaegerreceiver|hostmetricsreceiver|opencensusreceiver|prometheusreceiver|zipkinreceiver|kafkareceiver|filelogreceiver|journaldreceiver|k8seventsreceiver|kubeletstatsreceiver|k8sclusterreceiver|k8sobjectsreceiver\"}", "--match={__name__=\"type:opentelemetry_collector_exporters:sum\",type=~\"debugexporter|loggingexporter|otlpexporter|otlphttpexporter|prometheusexporter|lokiexporter|kafkaexporter|awscloudwatchlogsexporter|loadbalancingexporter\"}", "--match={__name__=\"type:opentelemetry_collector_processors:sum\",type=~\"batchprocessor|memorylimiterprocessor|attributesprocessor|resourceprocessor|spanprocessor|k8sattributesprocessor|resourcedetectionprocessor|filterprocessor|routingprocessor|cumulativetodeltaprocessor|groupbyattrsprocessor\"}", "--match={__name__=\"type:opentelemetry_collector_extensions:sum\",type=~\"zpagesextension|ballastextension|memorylimiterextension|jaegerremotesampling|healthcheckextension|pprofextension|oauth2clientauthextension|oidcauthextension|bearertokenauthextension|filestorage\"}", "--match={__name__=\"type:opentelemetry_collector_connectors:sum\",type=~\"spanmetricsconnector|forwardconnector\"}", "--match={__name__=\"type:opentelemetry_collector_info:sum\",type=~\"deployment|daemonset|sidecar|statefulset\"}", "--match={__name__=\"appsvcs:cores_by_product:sum\"}", "--match={__name__=\"nto_custom_profiles:count\"}", "--match={__name__=\"openshift_csi_share_configmap\"}", "--match={__name__=\"openshift_csi_share_secret\"}", "--match={__name__=\"openshift_csi_share_mount_failures_total\"}", "--match={__name__=\"openshift_csi_share_mount_requests_total\"}", "--match={__name__=\"eo_es_storage_info\"}", "--match={__name__=\"eo_es_redundancy_policy_info\"}", "--match={__name__=\"eo_es_defined_delete_namespaces_total\"}", "--match={__name__=\"eo_es_misconfigured_memory_resources_info\"}", "--match={__name__=\"cluster:eo_es_data_nodes_total:max\"}", "--match={__name__=\"cluster:eo_es_documents_created_total:sum\"}", "--match={__name__=\"cluster:eo_es_documents_deleted_total:sum\"}", "--match={__name__=\"pod:eo_es_shards_total:max\"}", "--match={__name__=\"eo_es_cluster_management_state_info\"}", "--match={__name__=\"imageregistry:imagestreamtags_count:sum\"}", "--match={__name__=\"imageregistry:operations_count:sum\"}", "--match={__name__=\"log_logging_info\"}", "--match={__name__=\"log_collector_error_count_total\"}", "--match={__name__=\"log_forwarder_pipeline_info\"}", "--match={__name__=\"log_forwarder_input_info\"}", "--match={__name__=\"log_forwarder_output_info\"}", "--match={__name__=\"cluster:log_collected_bytes_total:sum\"}", "--match={__name__=\"cluster:log_logged_bytes_total:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_pipelines:sum\"}", "--match={__name__=\"openshift_logging:log_forwarders:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_input_type:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_output_type:sum\"}", "--match={__name__=\"openshift_logging:vector_component_received_bytes_total:rate5m\"}", "--match={__name__=\"cluster:kata_monitor_running_shim_count:sum\"}", "--match={__name__=\"platform:hypershift_hostedclusters:max\"}", "--match={__name__=\"platform:hypershift_nodepools:max\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_size:sum\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_available_replicas:sum\"}", "--match={__name__=\"namespace:noobaa_unhealthy_bucket_claims:max\"}", "--match={__name__=\"namespace:noobaa_buckets_claims:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_accounts:max\"}", "--match={__name__=\"namespace:noobaa_usage:max\"}", "--match={__name__=\"namespace:noobaa_system_health_status:max\"}", "--match={__name__=\"ocs_advanced_feature_usage\"}", "--match={__name__=\"os_image_url_override:sum\"}", "--match={__name__=\"cluster:mcd_nodes_with_unsupported_packages:count\"}", "--match={__name__=\"cluster:mcd_total_unsupported_packages:sum\"}", "--match={__name__=\"cluster:vsphere_topology_tags:max\"}", "--match={__name__=\"cluster:vsphere_infrastructure_failure_domains:max\"}", "--match={__name__=\"apiserver_list_watch_request_success_total:rate:sum\", verb=~\"LIST|WATCH\"}", "--match={__name__=\"rhacs:telemetry:rox_central_info\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_clusters\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_nodes\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_vcpus\"}", "--match={__name__=\"rhacs:telemetry:rox_sensor_info\"}", "--match={__name__=\"cluster:volume_manager_selinux_pod_context_mismatch_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_warnings_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_errors_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volumes_admitted_total\"}", "--match={__name__=\"ols:provider_model_configuration\"}", "--match={__name__=\"ols:rest_api_query_calls_total:2xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:4xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:5xx\"}", "--match={__name__=\"openshift:openshift_network_operator_ipsec_state:info\"}", "--match={__name__=\"cluster:health:group_severity:count\", severity=~\"critical|warning|info|none\"}", "--match={__name__=\"cluster:mtv_migrations_status_total:sum\", provider=~\"ova|vsphere|openstack|openshift|ovirt|awsec2\", target=~\"Local|Remote\", mode=~\"Cold|Warm|RCM\", status=~\"Succeeded|Failed|Canceled\"}", "--limit-bytes=5242880" ], "env": [ { "name": "ANONYMIZE_LABELS" }, { "name": "FROM", "value": "https://prometheus-k8s.openshift-monitoring.svc:9091" }, { "name": "ID", "value": "954517f1-8cdf-4e45-a823-ab48fecefb66" }, { "name": "TO", "value": "https://infogw.api.openshift.com/" }, { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:861aaa1165d4664df2a3b548e569362a41127573205b26b9cf608a9fc2119ee5", "imagePullPolicy": "IfNotPresent", "name": "telemeter-client", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/telemeter", "name": "secret-telemeter-client" }, { "mountPath": "/etc/tls/private", "name": "federate-client-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "telemeter-trusted-ca-bundle", "readOnly": true } ] }, { "args": [ "--reload-url=http://localhost:8080/-/reload", "--watched-dir=/etc/serving-certs-ca-bundle" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3c861e6801e61cfacc24e9699133ceab5897304e65d5c22c4cf2f5f0eca4fd2f", "imagePullPolicy": "IfNotPresent", "name": "reload", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" } ] }, { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "telemeter-client-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "secret-telemeter-client-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "telemeter-client", "serviceAccountName": "telemeter-client", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemeter-client-serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-telemeter-client", "secret": { "defaultMode": 420, "secretName": "telemeter-client" } }, { "name": "telemeter-client-tls", "secret": { "defaultMode": 420, "secretName": "telemeter-client-tls" } }, { "name": "federate-client-tls", "secret": { "defaultMode": 420, "secretName": "federate-client-certs" } }, { "name": "secret-telemeter-client-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "telemeter-client-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "telemeter-trusted-ca-bundle-h7kpem0vm5cq", "optional": true }, "name": "telemeter-trusted-ca-bundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:00:38Z", "generation": 2, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "69c58f5bf4" }, "name": "telemeter-client-69c58f5bf4", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "telemeter-client", "uid": "40a77781-9ab3-4fc7-abfd-b9d57d5a77f3" } ], "resourceVersion": "40318", "uid": "83e539b3-ded7-4903-85ac-ef01483575f9" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/name": "telemeter-client", "pod-template-hash": "69c58f5bf4" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}", "telemeter-token-hash": "15goceamu8hbo" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "telemetry-metrics-collector", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "telemeter-client", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "69c58f5bf4" } }, "spec": { "containers": [ { "command": [ "/usr/bin/telemeter-client", "--id=$(ID)", "--from=$(FROM)", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--from-ca-file=/etc/serving-certs-ca-bundle/service-ca.crt", "--from-token-file=/var/run/secrets/kubernetes.io/serviceaccount/token", "--to=$(TO)", "--to-token-file=/etc/telemeter/token", "--listen=localhost:8080", "--anonymize-salt-file=/etc/telemeter/salt", "--anonymize-labels=$(ANONYMIZE_LABELS)", "--match={__name__=~\"cluster:usage:.*\"}", "--match={__name__=\"count:up0\"}", "--match={__name__=\"count:up1\"}", "--match={__name__=\"cluster_version\"}", "--match={__name__=\"cluster_version_available_updates\"}", "--match={__name__=\"cluster_version_capability\"}", "--match={__name__=\"cluster_operator_up\"}", "--match={__name__=\"cluster_operator_conditions\"}", "--match={__name__=\"cluster_version_payload\"}", "--match={__name__=\"cluster_installer\"}", "--match={__name__=\"cluster_infrastructure_provider\"}", "--match={__name__=\"cluster_feature_set\"}", "--match={__name__=\"instance:etcd_object_counts:sum\"}", "--match={__name__=\"ALERTS\",alertstate=\"firing\",severity=~\"critical|warning|info|none\"}", "--match={__name__=\"code:apiserver_request_total:rate:sum\"}", "--match={__name__=\"cluster:capacity_cpu_cores:sum\"}", "--match={__name__=\"cluster:capacity_memory_bytes:sum\"}", "--match={__name__=\"cluster:cpu_usage_cores:sum\"}", "--match={__name__=\"cluster:memory_usage_bytes:sum\"}", "--match={__name__=\"openshift:cpu_usage_cores:sum\"}", "--match={__name__=\"openshift:memory_usage_bytes:sum\"}", "--match={__name__=\"workload:cpu_usage_cores:sum\"}", "--match={__name__=\"workload:memory_usage_bytes:sum\"}", "--match={__name__=\"cluster:virt_platform_nodes:sum\"}", "--match={__name__=\"cluster:node_instance_type_count:sum\"}", "--match={__name__=\"cnv:vmi_status_running:count\"}", "--match={__name__=\"cnv_abnormal\", reason=~\"memory_working_set_delta_from_request|memory_rss_delta_from_request\"}", "--match={__name__=\"cluster:vmi_request_cpu_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_cores:sum\"}", "--match={__name__=\"node_role_os_version_machine:cpu_capacity_sockets:sum\"}", "--match={__name__=\"subscription_sync_total\"}", "--match={__name__=\"olm_resolution_duration_seconds\"}", "--match={__name__=\"csv_succeeded\"}", "--match={__name__=\"csv_abnormal\"}", "--match={__name__=\"cluster:kube_persistentvolumeclaim_resource_requests_storage_bytes:provisioner:sum\"}", "--match={__name__=\"cluster:kubelet_volume_stats_used_bytes:provisioner:sum\"}", "--match={__name__=\"ceph_cluster_total_bytes\"}", "--match={__name__=\"ceph_cluster_total_used_raw_bytes\"}", "--match={__name__=\"ceph_health_status\"}", "--match={__name__=\"odf_system_raw_capacity_total_bytes\"}", "--match={__name__=\"odf_system_raw_capacity_used_bytes\"}", "--match={__name__=\"odf_system_health_status\"}", "--match={__name__=\"job:ceph_osd_metadata:count\"}", "--match={__name__=\"job:kube_pv:count\"}", "--match={__name__=\"job:odf_system_pvs:count\"}", "--match={__name__=\"job:ceph_pools_iops:total\"}", "--match={__name__=\"job:ceph_pools_iops_bytes:total\"}", "--match={__name__=\"job:ceph_versions_running:count\"}", "--match={__name__=\"job:noobaa_total_unhealthy_buckets:sum\"}", "--match={__name__=\"job:noobaa_bucket_count:sum\"}", "--match={__name__=\"job:noobaa_total_object_count:sum\"}", "--match={__name__=\"odf_system_bucket_count\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"odf_system_objects_total\", system_type=\"OCS\", system_vendor=\"Red Hat\"}", "--match={__name__=\"noobaa_accounts_num\"}", "--match={__name__=\"noobaa_total_usage\"}", "--match={__name__=\"console_url\"}", "--match={__name__=\"cluster:console_auth_login_requests_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_successes_total:sum\"}", "--match={__name__=\"cluster:console_auth_login_failures_total:sum\"}", "--match={__name__=\"cluster:console_auth_logout_requests_total:sum\"}", "--match={__name__=\"cluster:console_usage_users:max\"}", "--match={__name__=\"cluster:console_plugins_info:max\"}", "--match={__name__=\"cluster:console_customization_perspectives_info:max\"}", "--match={__name__=\"cluster:ovnkube_controller_egress_routing_via_host:max\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_db_objects:max\",table_name=~\"ACL|Address_Set\"}", "--match={__name__=\"cluster:ovnkube_controller_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Pass|Allow|Deny\"}", "--match={__name__=\"cluster:ovnkube_controller_baseline_admin_network_policies_rules:max\",direction=~\"Ingress|Egress\",action=~\"Allow|Deny\"}", "--match={__name__=\"cluster:network_attachment_definition_instances:max\"}", "--match={__name__=\"cluster:network_attachment_definition_enabled_instance_up:max\"}", "--match={__name__=\"cluster:ingress_controller_aws_nlb_active:sum\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:min\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:max\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:avg\"}", "--match={__name__=\"cluster:route_metrics_controller_routes_per_shard:median\"}", "--match={__name__=\"cluster:openshift_route_info:tls_termination:sum\"}", "--match={__name__=\"insightsclient_request_send_total\"}", "--match={__name__=\"cam_app_workload_migrations\"}", "--match={__name__=\"cluster:apiserver_current_inflight_requests:sum:max_over_time:2m\"}", "--match={__name__=\"cluster:alertmanager_integrations:max\"}", "--match={__name__=\"cluster:telemetry_selected_series:count\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_series:sum\"}", "--match={__name__=\"openshift:prometheus_tsdb_head_samples_appended_total:sum\"}", "--match={__name__=\"monitoring:container_memory_working_set_bytes:sum\"}", "--match={__name__=\"namespace_job:scrape_series_added:topk3_sum1h\"}", "--match={__name__=\"namespace_job:scrape_samples_post_metric_relabeling:topk3\"}", "--match={__name__=\"monitoring:haproxy_server_http_responses_total:sum\"}", "--match={__name__=\"profile:cluster_monitoring_operator_collection_profile:max\"}", "--match={__name__=\"vendor_model:node_accelerator_cards:sum\",vendor=~\"NVIDIA|AMD|GAUDI|INTEL|QUALCOMM\"}", "--match={__name__=\"rhmi_status\"}", "--match={__name__=\"status:upgrading:version:rhoam_state:max\"}", "--match={__name__=\"state:rhoam_critical_alerts:max\"}", "--match={__name__=\"state:rhoam_warning_alerts:max\"}", "--match={__name__=\"rhoam_7d_slo_percentile:max\"}", "--match={__name__=\"rhoam_7d_slo_remaining_error_budget:max\"}", "--match={__name__=\"cluster_legacy_scheduler_policy\"}", "--match={__name__=\"cluster_master_schedulable\"}", "--match={__name__=\"che_workspace_status\"}", "--match={__name__=\"che_workspace_started_total\"}", "--match={__name__=\"che_workspace_failure_total\"}", "--match={__name__=\"che_workspace_start_time_seconds_sum\"}", "--match={__name__=\"che_workspace_start_time_seconds_count\"}", "--match={__name__=\"cco_credentials_mode\"}", "--match={__name__=\"cluster:kube_persistentvolume_plugin_type_counts:sum\"}", "--match={__name__=\"acm_managed_cluster_info\"}", "--match={__name__=\"acm_managed_cluster_worker_cores:max\"}", "--match={__name__=\"acm_console_page_count:sum\", page=~\"overview-classic|overview-fleet|search|search-details|clusters|application|governance\"}", "--match={__name__=\"cluster:vsphere_vcenter_info:sum\"}", "--match={__name__=\"cluster:vsphere_esxi_version_total:sum\"}", "--match={__name__=\"cluster:vsphere_node_hw_version_total:sum\"}", "--match={__name__=\"openshift:build_by_strategy:sum\"}", "--match={__name__=\"rhods_aggregate_availability\"}", "--match={__name__=\"rhods_total_users\"}", "--match={__name__=\"instance:etcd_disk_wal_fsync_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_network_peer_round_trip_time_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"instance:etcd_mvcc_db_total_size_in_use_in_bytes:sum\"}", "--match={__name__=\"instance:etcd_disk_backend_commit_duration_seconds:histogram_quantile\",quantile=\"0.99\"}", "--match={__name__=\"jaeger_operator_instances_storage_types\"}", "--match={__name__=\"jaeger_operator_instances_strategies\"}", "--match={__name__=\"jaeger_operator_instances_agent_strategies\"}", "--match={__name__=\"type:tempo_operator_tempostack_storage_backend:sum\",type=~\"azure|gcs|s3\"}", "--match={__name__=\"state:tempo_operator_tempostack_managed:sum\",state=~\"Managed|Unmanaged\"}", "--match={__name__=\"type:tempo_operator_tempostack_multi_tenancy:sum\",type=~\"enabled|disabled\"}", "--match={__name__=\"enabled:tempo_operator_tempostack_jaeger_ui:sum\",enabled=~\"true|false\"}", "--match={__name__=\"type:opentelemetry_collector_receivers:sum\",type=~\"jaegerreceiver|hostmetricsreceiver|opencensusreceiver|prometheusreceiver|zipkinreceiver|kafkareceiver|filelogreceiver|journaldreceiver|k8seventsreceiver|kubeletstatsreceiver|k8sclusterreceiver|k8sobjectsreceiver\"}", "--match={__name__=\"type:opentelemetry_collector_exporters:sum\",type=~\"debugexporter|loggingexporter|otlpexporter|otlphttpexporter|prometheusexporter|lokiexporter|kafkaexporter|awscloudwatchlogsexporter|loadbalancingexporter\"}", "--match={__name__=\"type:opentelemetry_collector_processors:sum\",type=~\"batchprocessor|memorylimiterprocessor|attributesprocessor|resourceprocessor|spanprocessor|k8sattributesprocessor|resourcedetectionprocessor|filterprocessor|routingprocessor|cumulativetodeltaprocessor|groupbyattrsprocessor\"}", "--match={__name__=\"type:opentelemetry_collector_extensions:sum\",type=~\"zpagesextension|ballastextension|memorylimiterextension|jaegerremotesampling|healthcheckextension|pprofextension|oauth2clientauthextension|oidcauthextension|bearertokenauthextension|filestorage\"}", "--match={__name__=\"type:opentelemetry_collector_connectors:sum\",type=~\"spanmetricsconnector|forwardconnector\"}", "--match={__name__=\"type:opentelemetry_collector_info:sum\",type=~\"deployment|daemonset|sidecar|statefulset\"}", "--match={__name__=\"appsvcs:cores_by_product:sum\"}", "--match={__name__=\"nto_custom_profiles:count\"}", "--match={__name__=\"openshift_csi_share_configmap\"}", "--match={__name__=\"openshift_csi_share_secret\"}", "--match={__name__=\"openshift_csi_share_mount_failures_total\"}", "--match={__name__=\"openshift_csi_share_mount_requests_total\"}", "--match={__name__=\"eo_es_storage_info\"}", "--match={__name__=\"eo_es_redundancy_policy_info\"}", "--match={__name__=\"eo_es_defined_delete_namespaces_total\"}", "--match={__name__=\"eo_es_misconfigured_memory_resources_info\"}", "--match={__name__=\"cluster:eo_es_data_nodes_total:max\"}", "--match={__name__=\"cluster:eo_es_documents_created_total:sum\"}", "--match={__name__=\"cluster:eo_es_documents_deleted_total:sum\"}", "--match={__name__=\"pod:eo_es_shards_total:max\"}", "--match={__name__=\"eo_es_cluster_management_state_info\"}", "--match={__name__=\"imageregistry:imagestreamtags_count:sum\"}", "--match={__name__=\"imageregistry:operations_count:sum\"}", "--match={__name__=\"log_logging_info\"}", "--match={__name__=\"log_collector_error_count_total\"}", "--match={__name__=\"log_forwarder_pipeline_info\"}", "--match={__name__=\"log_forwarder_input_info\"}", "--match={__name__=\"log_forwarder_output_info\"}", "--match={__name__=\"cluster:log_collected_bytes_total:sum\"}", "--match={__name__=\"cluster:log_logged_bytes_total:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_pipelines:sum\"}", "--match={__name__=\"openshift_logging:log_forwarders:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_input_type:sum\"}", "--match={__name__=\"openshift_logging:log_forwarder_output_type:sum\"}", "--match={__name__=\"openshift_logging:vector_component_received_bytes_total:rate5m\"}", "--match={__name__=\"cluster:kata_monitor_running_shim_count:sum\"}", "--match={__name__=\"platform:hypershift_hostedclusters:max\"}", "--match={__name__=\"platform:hypershift_nodepools:max\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_size:sum\"}", "--match={__name__=\"cluster_name:hypershift_nodepools_available_replicas:sum\"}", "--match={__name__=\"namespace:noobaa_unhealthy_bucket_claims:max\"}", "--match={__name__=\"namespace:noobaa_buckets_claims:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_namespace_resources:max\"}", "--match={__name__=\"namespace:noobaa_unhealthy_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_namespace_buckets:max\"}", "--match={__name__=\"namespace:noobaa_accounts:max\"}", "--match={__name__=\"namespace:noobaa_usage:max\"}", "--match={__name__=\"namespace:noobaa_system_health_status:max\"}", "--match={__name__=\"ocs_advanced_feature_usage\"}", "--match={__name__=\"os_image_url_override:sum\"}", "--match={__name__=\"cluster:mcd_nodes_with_unsupported_packages:count\"}", "--match={__name__=\"cluster:mcd_total_unsupported_packages:sum\"}", "--match={__name__=\"cluster:vsphere_topology_tags:max\"}", "--match={__name__=\"cluster:vsphere_infrastructure_failure_domains:max\"}", "--match={__name__=\"apiserver_list_watch_request_success_total:rate:sum\", verb=~\"LIST|WATCH\"}", "--match={__name__=\"rhacs:telemetry:rox_central_info\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_clusters\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_nodes\"}", "--match={__name__=\"rhacs:telemetry:rox_central_secured_vcpus\"}", "--match={__name__=\"rhacs:telemetry:rox_sensor_info\"}", "--match={__name__=\"cluster:volume_manager_selinux_pod_context_mismatch_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_warnings_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volume_context_mismatch_errors_total\"}", "--match={__name__=\"cluster:volume_manager_selinux_volumes_admitted_total\"}", "--match={__name__=\"ols:provider_model_configuration\"}", "--match={__name__=\"ols:rest_api_query_calls_total:2xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:4xx\"}", "--match={__name__=\"ols:rest_api_query_calls_total:5xx\"}", "--match={__name__=\"openshift:openshift_network_operator_ipsec_state:info\"}", "--match={__name__=\"cluster:health:group_severity:count\", severity=~\"critical|warning|info|none\"}", "--match={__name__=\"cluster:mtv_migrations_status_total:sum\", provider=~\"ova|vsphere|openstack|openshift|ovirt|awsec2\", target=~\"Local|Remote\", mode=~\"Cold|Warm|RCM\", status=~\"Succeeded|Failed|Canceled\"}", "--limit-bytes=5242880" ], "env": [ { "name": "ANONYMIZE_LABELS" }, { "name": "FROM", "value": "https://prometheus-k8s.openshift-monitoring.svc:9091" }, { "name": "ID", "value": "954517f1-8cdf-4e45-a823-ab48fecefb66" }, { "name": "TO", "value": "https://infogw.api.openshift.com/" }, { "name": "HTTP_PROXY" }, { "name": "HTTPS_PROXY" }, { "name": "NO_PROXY" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:861aaa1165d4664df2a3b548e569362a41127573205b26b9cf608a9fc2119ee5", "imagePullPolicy": "IfNotPresent", "name": "telemeter-client", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "40Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" }, { "mountPath": "/etc/telemeter", "name": "secret-telemeter-client" }, { "mountPath": "/etc/tls/private", "name": "federate-client-tls" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem/", "name": "telemeter-trusted-ca-bundle", "readOnly": true } ] }, { "args": [ "--reload-url=http://localhost:8080/-/reload", "--watched-dir=/etc/serving-certs-ca-bundle" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3c861e6801e61cfacc24e9699133ceab5897304e65d5c22c4cf2f5f0eca4fd2f", "imagePullPolicy": "IfNotPresent", "name": "reload", "resources": { "requests": { "cpu": "1m", "memory": "10Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/serving-certs-ca-bundle", "name": "serving-certs-ca-bundle" } ] }, { "args": [ "--secure-listen-address=:8443", "--upstream=http://127.0.0.1:8080/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--config-file=/etc/kube-rbac-policy/config.yaml", "--client-ca-file=/etc/tls/client/client-ca.crt", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "telemeter-client-tls" }, { "mountPath": "/etc/kube-rbac-policy", "name": "secret-telemeter-client-kube-rbac-proxy-config", "readOnly": true }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "telemeter-client", "serviceAccountName": "telemeter-client", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "telemeter-client-serving-certs-ca-bundle" }, "name": "serving-certs-ca-bundle" }, { "name": "secret-telemeter-client", "secret": { "defaultMode": 420, "secretName": "telemeter-client" } }, { "name": "telemeter-client-tls", "secret": { "defaultMode": 420, "secretName": "telemeter-client-tls" } }, { "name": "federate-client-tls", "secret": { "defaultMode": 420, "secretName": "federate-client-certs" } }, { "name": "secret-telemeter-client-kube-rbac-proxy-config", "secret": { "defaultMode": 420, "secretName": "telemeter-client-kube-rbac-proxy-config" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "telemeter-trusted-ca-bundle-8i12ta5c71j38", "optional": true }, "name": "telemeter-trusted-ca-bundle" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T11:59:16Z", "generation": 1, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.36.1", "pod-template-hash": "7bb9b9689c" }, "name": "thanos-querier-7bb9b9689c", "namespace": "openshift-monitoring", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "thanos-querier", "uid": "e5bea7aa-a4f0-478f-8910-a3b8d5979ea5" } ], "resourceVersion": "43472", "uid": "7893fdd4-5390-4eff-b7fe-f268ce5319d4" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "pod-template-hash": "7bb9b9689c" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/managed-by": "cluster-monitoring-operator", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring", "app.kubernetes.io/version": "0.36.1", "pod-template-hash": "7bb9b9689c" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "query-layer", "app.kubernetes.io/instance": "thanos-querier", "app.kubernetes.io/name": "thanos-query", "app.kubernetes.io/part-of": "openshift-monitoring" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "query", "--grpc-address=127.0.0.1:10901", "--http-address=127.0.0.1:9090", "--log.format=logfmt", "--query.replica-label=prometheus_replica", "--query.replica-label=thanos_ruler_replica", "--endpoint=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--query.auto-downsampling", "--store.sd-dns-resolver=miekgdns", "--grpc-client-tls-secure", "--grpc-client-tls-cert=/etc/tls/grpc/client.crt", "--grpc-client-tls-key=/etc/tls/grpc/client.key", "--grpc-client-tls-ca=/etc/tls/grpc/ca.crt", "--grpc-client-server-name=prometheus-grpc", "--rule=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--target=dnssrv+_grpc._tcp.prometheus-operated.openshift-monitoring.svc.cluster.local", "--web.disable-cors" ], "env": [ { "name": "HOST_IP_ADDRESS", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.hostIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:d3cb7fece0a7bf309c52ca2e47e6ec7bb1c0ee556a37834f3df6fe1ae08610e0", "imagePullPolicy": "IfNotPresent", "name": "thanos-query", "ports": [ { "containerPort": 9090, "name": "http", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "12Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": false, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/grpc", "name": "secret-grpc-tls" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9091", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--ignore-paths=/-/healthy,/-/ready", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 4, "httpGet": { "path": "/-/healthy", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "kube-rbac-proxy-web", "ports": [ { "containerPort": 9091, "name": "web", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 20, "httpGet": { "path": "/-/ready", "port": 9091, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-web" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9092", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/query,/api/v1/query_range,/api/v1/labels,/api/v1/label/*/values,/api/v1/series", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9092, "name": "tenancy", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy" } ] }, { "args": [ "--insecure-listen-address=127.0.0.1:9095", "--upstream=http://127.0.0.1:9090", "--label=namespace", "--enable-label-apis", "--error-on-replace", "--rules-with-active-alerts" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b102a969e184da2bf098d33442c6a4f8a6ee130d4a0ea7f26452427447105e2a", "imagePullPolicy": "IfNotPresent", "name": "prom-label-proxy", "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" }, { "args": [ "--secure-listen-address=0.0.0.0:9093", "--upstream=http://127.0.0.1:9095", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--allow-paths=/api/v1/rules,/api/v1/alerts", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-rules", "ports": [ { "containerPort": 9093, "name": "tenancy-rules", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-rules" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:9094", "--upstream=http://127.0.0.1:9090", "--config-file=/etc/kube-rbac-proxy/config.yaml", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--tls-cipher-suites=TLS_AES_128_GCM_SHA256,TLS_AES_256_GCM_SHA384,TLS_CHACHA20_POLY1305_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256,TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256", "--client-ca-file=/etc/tls/client/client-ca.crt", "--allow-paths=/metrics", "--tls-min-version=VersionTLS12" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy-metrics", "ports": [ { "containerPort": 9094, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "secret-thanos-querier-tls" }, { "mountPath": "/etc/kube-rbac-proxy", "name": "secret-thanos-querier-kube-rbac-proxy-metrics" }, { "mountPath": "/etc/tls/client", "name": "metrics-client-ca", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "thanos-querier", "serviceAccountName": "thanos-querier", "terminationGracePeriodSeconds": 120, "volumes": [ { "name": "secret-thanos-querier-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-tls" } }, { "name": "secret-thanos-querier-kube-rbac-proxy", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-web", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-web" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-rules", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-rules" } }, { "name": "secret-thanos-querier-kube-rbac-proxy-metrics", "secret": { "defaultMode": 420, "secretName": "thanos-querier-kube-rbac-proxy-metrics" } }, { "configMap": { "defaultMode": 420, "name": "metrics-client-ca" }, "name": "metrics-client-ca" }, { "name": "secret-grpc-tls", "secret": { "defaultMode": 420, "secretName": "thanos-querier-grpc-tls-1bgfo2hk0hgv8" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "kubernetes.io/description": "This deployment launches the Multus admisson controller component.\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:50:26Z", "generation": 4, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "797c77ddc9", "type": "infra" }, "name": "multus-admission-controller-797c77ddc9", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "multus-admission-controller", "uid": "31c8bb25-c218-4444-8ea1-1891ddfcd389" } ], "resourceVersion": "38044", "uid": "32854b04-5484-4f5e-9906-1e7e243474e1" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "multus-admission-controller", "namespace": "openshift-multus", "pod-template-hash": "797c77ddc9" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "hosted-cluster-api-access", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "797c77ddc9", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -euo pipefail\nexec /usr/bin/webhook \\\n -bind-address=0.0.0.0 \\\n -port=6443 \\\n -tls-private-key-file=/etc/webhook/tls.key \\\n -tls-cert-file=/etc/webhook/tls.crt \\\n -metrics-listen-address=127.0.0.1:9091 \\\n -alsologtostderr=true \\\n -ignore-namespaces=openshift-etcd,openshift-console,openshift-ingress-canary,openshift-apiserver,openshift-apiserver-operator,openshift-authentication,openshift-authentication-operator,openshift-cloud-controller-manager,openshift-cloud-controller-manager-operator,openshift-cloud-credential-operator,openshift-cloud-network-config-controller,openshift-cluster-csi-drivers,openshift-cluster-machine-approver,openshift-cluster-node-tuning-operator,openshift-cluster-samples-operator,openshift-cluster-storage-operator,openshift-cluster-version,openshift-config-operator,openshift-controller-manager,openshift-controller-manager-operator,openshift-dns,openshift-dns-operator,openshift-etcd-operator,openshift-image-registry,openshift-ingress,openshift-ingress-operator,openshift-insights,openshift-kube-apiserver,openshift-kube-apiserver-operator,openshift-kube-controller-manager,openshift-kube-controller-manager-operator,openshift-kube-scheduler,openshift-kube-scheduler-operator,openshift-kube-storage-version-migrator,openshift-kube-storage-version-migrator-operator,openshift-machine-api,openshift-machine-config-operator,openshift-marketplace,openshift-monitoring,openshift-multus,openshift-network-diagnostics,openshift-network-node-identity,openshift-network-operator,openshift-oauth-apiserver,openshift-operator-lifecycle-manager,openshift-ovn-kubernetes,openshift-route-controller-manager,openshift-service-ca-operator,openshift-user-workload-monitoring" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:83d5675592c5ef388b5bb650998e8757fdac215e13856af4bad294393b755936", "imagePullPolicy": "IfNotPresent", "name": "multus-admission-controller", "ports": [ { "containerPort": 9091, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/webhook/tls.key", "--tls-cert-file=/etc/webhook/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "multus-ac", "serviceAccountName": "multus-ac", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "multus-admission-controller-secret" } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the Multus admisson controller component.\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:47:51Z", "generation": 3, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "97775fcf4", "type": "infra" }, "name": "multus-admission-controller-97775fcf4", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "multus-admission-controller", "uid": "31c8bb25-c218-4444-8ea1-1891ddfcd389" } ], "resourceVersion": "11243", "uid": "7461e1bc-c43a-427c-93bc-424aba21172e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "multus-admission-controller", "namespace": "openshift-multus", "pod-template-hash": "97775fcf4" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "hosted-cluster-api-access", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "97775fcf4", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -euo pipefail\nexec /usr/bin/webhook \\\n -bind-address=0.0.0.0 \\\n -port=6443 \\\n -tls-private-key-file=/etc/webhook/tls.key \\\n -tls-cert-file=/etc/webhook/tls.crt \\\n -metrics-listen-address=127.0.0.1:9091 \\\n -alsologtostderr=true \\\n -ignore-namespaces=openshift-etcd,openshift-console,openshift-ingress-canary,openshift-apiserver-operator,openshift-authentication-operator,openshift-cloud-controller-manager,openshift-cloud-controller-manager-operator,openshift-cloud-credential-operator,openshift-cloud-network-config-controller,openshift-cluster-csi-drivers,openshift-cluster-machine-approver,openshift-cluster-node-tuning-operator,openshift-cluster-samples-operator,openshift-cluster-storage-operator,openshift-cluster-version,openshift-config-operator,openshift-controller-manager-operator,openshift-dns-operator,openshift-etcd-operator,openshift-image-registry,openshift-ingress-operator,openshift-insights,openshift-kube-apiserver,openshift-kube-apiserver-operator,openshift-kube-controller-manager,openshift-kube-controller-manager-operator,openshift-kube-scheduler-operator,openshift-kube-storage-version-migrator-operator,openshift-machine-api,openshift-machine-config-operator,openshift-marketplace,openshift-monitoring,openshift-network-operator,openshift-operator-lifecycle-manager,openshift-service-ca-operator,openshift-user-workload-monitoring" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:83d5675592c5ef388b5bb650998e8757fdac215e13856af4bad294393b755936", "imagePullPolicy": "IfNotPresent", "name": "multus-admission-controller", "ports": [ { "containerPort": 9091, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/webhook/tls.key", "--tls-cert-file=/etc/webhook/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "multus-ac", "serviceAccountName": "multus-ac", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "multus-admission-controller-secret" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "kubernetes.io/description": "This deployment launches the Multus admisson controller component.\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T12:54:27Z", "generation": 2, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "d9759b979", "type": "infra" }, "name": "multus-admission-controller-d9759b979", "namespace": "openshift-multus", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "multus-admission-controller", "uid": "31c8bb25-c218-4444-8ea1-1891ddfcd389" } ], "resourceVersion": "38030", "uid": "86dc9641-e525-4d4c-802e-a67b2d786b3f" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "multus-admission-controller", "namespace": "openshift-multus", "pod-template-hash": "d9759b979" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict-local-volumes": "hosted-cluster-api-access", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "multus-admission-controller", "component": "network", "namespace": "openshift-multus", "openshift.io/component": "network", "pod-template-hash": "d9759b979", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "set -euo pipefail\nexec /usr/bin/webhook \\\n -bind-address=0.0.0.0 \\\n -port=6443 \\\n -tls-private-key-file=/etc/webhook/tls.key \\\n -tls-cert-file=/etc/webhook/tls.crt \\\n -metrics-listen-address=127.0.0.1:9091 \\\n -alsologtostderr=true \\\n -ignore-namespaces=openshift-etcd,openshift-console,openshift-ingress-canary,openshift-apiserver,openshift-apiserver-operator,openshift-authentication,openshift-authentication-operator,openshift-cloud-controller-manager,openshift-cloud-controller-manager-operator,openshift-cloud-credential-operator,openshift-cloud-network-config-controller,openshift-cluster-csi-drivers,openshift-cluster-machine-approver,openshift-cluster-node-tuning-operator,openshift-cluster-samples-operator,openshift-cluster-storage-operator,openshift-cluster-version,openshift-config-operator,openshift-console,openshift-console-operator,openshift-controller-manager,openshift-controller-manager-operator,openshift-dns,openshift-dns-operator,openshift-etcd-operator,openshift-image-registry,openshift-ingress,openshift-ingress-operator,openshift-insights,openshift-kube-apiserver,openshift-kube-apiserver-operator,openshift-kube-controller-manager,openshift-kube-controller-manager-operator,openshift-kube-scheduler,openshift-kube-scheduler-operator,openshift-kube-storage-version-migrator,openshift-kube-storage-version-migrator-operator,openshift-machine-api,openshift-machine-config-operator,openshift-marketplace,openshift-monitoring,openshift-multus,openshift-network-console,openshift-network-diagnostics,openshift-network-node-identity,openshift-network-operator,openshift-oauth-apiserver,openshift-operator-lifecycle-manager,openshift-ovn-kubernetes,openshift-route-controller-manager,openshift-service-ca-operator,openshift-user-workload-monitoring" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:83d5675592c5ef388b5bb650998e8757fdac215e13856af4bad294393b755936", "imagePullPolicy": "IfNotPresent", "name": "multus-admission-controller", "ports": [ { "containerPort": 9091, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] }, { "args": [ "--logtostderr", "--secure-listen-address=:8443", "--tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384,TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305", "--upstream=http://127.0.0.1:9091/", "--tls-private-key-file=/etc/webhook/tls.key", "--tls-cert-file=/etc/webhook/tls.crt" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/webhook", "name": "webhook-certs", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "multus-ac", "serviceAccountName": "multus-ac", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" } ], "volumes": [ { "name": "webhook-certs", "secret": { "defaultMode": 420, "secretName": "multus-admission-controller-secret" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 2, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the Networking console plugin pod which serves\nthe contents of the Networking section in OpenShift Console\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:57:28Z", "generation": 1, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "5866fb7f5d" }, "name": "networking-console-plugin-5866fb7f5d", "namespace": "openshift-network-console", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "networking-console-plugin", "uid": "888de326-e4e9-4acf-a34b-f4994883b7d3" } ], "resourceVersion": "19653", "uid": "47f2e954-b23e-43da-986f-a0a64dcfef76" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "5866fb7f5d" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator", "pod-template-hash": "5866fb7f5d" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "networking-console-plugin", "app.kubernetes.io/managed-by": "cluster-network-operator", "app.kubernetes.io/name": "networking-console-plugin", "app.kubernetes.io/part-of": "cluster-network-operator" } }, "namespaces": [ "openshift-network-console" ], "topologyKey": "kubernetes.io/hostname" }, "weight": 90 } ] } }, "automountServiceAccountToken": false, "containers": [ { "command": [ "/bin/sh", "-c", "if echo \"$POD_IP\" | grep -qE '^([0-9]{1,3}\\.){3}[0-9]{1,3}$'; then\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"9443\"\nelse\n LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME=\"[::]:9443\"\nfi\nsed \"s/LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/$LISTEN_ADDRESS_PORT_REPLACED_AT_RUNTIME/g\" /etc/nginx/nginx.conf \u003e /tmp/nginx.conf\nexec nginx -c /tmp/nginx.conf -g 'daemon off;'\n" ], "env": [ { "name": "POD_IP", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "status.podIP" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa18492376f36004282709d9f458be7864a8d5b11503bc7872dbaf00d906c3ef", "imagePullPolicy": "IfNotPresent", "name": "networking-console-plugin", "ports": [ { "containerPort": 9443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cert", "name": "networking-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "networking-console-plugin" }, "name": "nginx-conf" }, { "name": "networking-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "networking-console-plugin-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment deploys the network-check-source pod that performs\npod network connectivity checks\n", "networkoperator.openshift.io/non-critical": "", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:48:03Z", "generation": 1, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "f95f7f976" }, "name": "network-check-source-f95f7f976", "namespace": "openshift-network-diagnostics", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "network-check-source", "uid": "3a182b63-585a-4046-86d7-d655a7917e44" } ], "resourceVersion": "14381", "uid": "2131928d-8f48-4b9f-b83b-f62efbaa658e" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "network-check-source", "pod-template-hash": "f95f7f976" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "network-check-source", "kubernetes.io/os": "linux", "pod-template-hash": "f95f7f976" } }, "spec": { "containers": [ { "args": [ "--listen", "0.0.0.0:17698", "--namespace", "$(POD_NAMESPACE)" ], "command": [ "cluster-network-check-endpoints" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08", "imagePullPolicy": "IfNotPresent", "name": "check-endpoints", "ports": [ { "containerPort": 17698, "name": "check-endpoints", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "40Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "priorityClassName": "openshift-user-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "network-diagnostics", "serviceAccountName": "network-diagnostics", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:14Z", "generation": 1, "labels": { "name": "network-operator", "pod-template-hash": "7b7d77474c" }, "name": "network-operator-7b7d77474c", "namespace": "openshift-network-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "network-operator", "uid": "00819e0c-8bef-4d53-88c1-b5e63f5851c8" } ], "resourceVersion": "10394", "uid": "343f4051-ecf0-4b29-b878-9fa0d481ebe3" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "network-operator", "pod-template-hash": "7b7d77474c" } }, "template": { "metadata": { "annotations": { "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "name": "network-operator", "pod-template-hash": "7b7d77474c" } }, "spec": { "affinity": { "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "name": "network-operator" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -o allexport\nif [[ -f /etc/kubernetes/apiserver-url.env ]]; then\n source /etc/kubernetes/apiserver-url.env\nelse\n echo \"Error: /etc/kubernetes/apiserver-url.env is missing\"\n exit 1\nfi\nexec /usr/bin/cluster-network-operator start --listen=0.0.0.0:9104\n" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "KUBE_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9129d403c73448983437d048b2f7ce957b0f8eac04ce2aa428df773227113cb7" }, { "name": "KUBE_RBAC_PROXY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d" }, { "name": "MULTUS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:313f4502ade36e5ecf2d18edc5a57708cdc8289a687e7c041bfce1af0ecc8e7e" }, { "name": "MULTUS_ADMISSION_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:83d5675592c5ef388b5bb650998e8757fdac215e13856af4bad294393b755936" }, { "name": "CNI_PLUGINS_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b9ebd544b1d3a332ce1ca998db818ab6d3bf9ccd3f90a8ed5281db78ca81dd2c" }, { "name": "BOND_CNI_PLUGIN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:42eec9ffc32d14f871c7f8001b5d344fcdcd26bc766f280399286e47f1221f01" }, { "name": "WHEREABOUTS_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7cd4ad59cb28e251c06f41e147a40395a8fc52c670fea74e5701b2994593c628" }, { "name": "ROUTE_OVERRRIDE_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:55e57a17432070cd70feaba000ce30acc351db7619f920e1369cfd850b31fb3a" }, { "name": "MULTUS_NETWORKPOLICY_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:ed6677971e3e3ebde4d6d02534dfe281a316c9342f23e82281412b1ea7641d3e" }, { "name": "OVN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16" }, { "name": "OVN_NB_RAFT_ELECTION_TIMER", "value": "10" }, { "name": "OVN_SB_RAFT_ELECTION_TIMER", "value": "16" }, { "name": "OVN_NORTHD_PROBE_INTERVAL", "value": "10000" }, { "name": "OVN_CONTROLLER_INACTIVITY_PROBE", "value": "180000" }, { "name": "OVN_NB_INACTIVITY_PROBE", "value": "60000" }, { "name": "EGRESS_ROUTER_CNI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:56dcd2f8f740505e7b07052874a64da0989642311a63167a8e5ba312c027231f" }, { "name": "NETWORK_METRICS_DAEMON_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:41f20de4ba92a7355dfbca6a69478b8608faf24f9b98ca111490d66063dda447" }, { "name": "NETWORK_CHECK_SOURCE_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08" }, { "name": "NETWORK_CHECK_TARGET_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08" }, { "name": "NETWORK_OPERATOR_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08" }, { "name": "CLOUD_NETWORK_CONFIG_CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:c6e80c4f355cd8176864cf3efa93b57846e94578073fe846385761eb0929385d" }, { "name": "CLI_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:bd12da40794cf7faff3eef68b853d343660acefb8c23ba1786d120430f09760c" }, { "name": "FRR_K8S_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:b4dd345e67e0d4f80968f2f04aac4d5da1ce02a3b880502867e03d4fa46d3862" }, { "name": "NETWORKING_CONSOLE_PLUGIN_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:aa18492376f36004282709d9f458be7864a8d5b11503bc7872dbaf00d906c3ef" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:7b688dd4320873361832644a947deb502c275df63d3776d64b423bba27709b08", "imagePullPolicy": "IfNotPresent", "name": "network-operator", "ports": [ { "containerPort": 9104, "hostPort": 9104, "name": "cno", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/kubernetes", "name": "host-etc-kube", "readOnly": true }, { "mountPath": "/var/run/secrets/serving-cert", "name": "metrics-tls" } ] } ], "dnsPolicy": "ClusterFirst", "hostNetwork": true, "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "runAsUser": 65534 }, "serviceAccount": "cluster-network-operator", "serviceAccountName": "cluster-network-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "effect": "NoSchedule", "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" } ], "volumes": [ { "hostPath": { "path": "/etc/kubernetes", "type": "Directory" }, "name": "host-etc-kube" }, { "name": "metrics-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "metrics-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/spec-hash": "b90734005af90ecaf49b78ce71d2e4d14d984119c922268ae31a1d3572258d79" }, "creationTimestamp": "2026-04-28T11:49:31Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "5bcf9f5674", "revision": "1" }, "name": "apiserver-5bcf9f5674", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "e58c6664-a075-4821-8a93-0677c5a83028" } ], "resourceVersion": "12902", "uid": "d75ccfb6-538f-43ea-9bf9-ea0a22d5200d" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "5bcf9f5674" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "5bcf9f5674", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.192.108:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/spec-hash": "68ed44bc4af4fe737827c8b5e8d4d243a339cbcf117749fbd7d94a5471d12c3f" }, "creationTimestamp": "2026-04-28T11:50:49Z", "generation": 5, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "646c94b4f5", "revision": "1" }, "name": "apiserver-646c94b4f5", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "e58c6664-a075-4821-8a93-0677c5a83028" } ], "resourceVersion": "13960", "uid": "0cf94989-f0fd-4ef8-981a-937261e36d76" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "646c94b4f5" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "646c94b4f5", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.192.108:2379 \\\n --etcd-servers=https://10.0.24.200:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 5, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/spec-hash": "54bbeb34ea0ebb04c2d6fbff92d2e01d9fa73809c2dd06cb6f833edbe31d098d" }, "creationTimestamp": "2026-04-28T11:52:37Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "6854fbb8f8", "revision": "1" }, "name": "apiserver-6854fbb8f8", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "e58c6664-a075-4821-8a93-0677c5a83028" } ], "resourceVersion": "20065", "uid": "2243a16f-92e6-4c7e-be4e-09264185dc0e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "6854fbb8f8" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "6854fbb8f8", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.192.108:2379 \\\n --etcd-servers=https://10.0.24.200:2379 \\\n --etcd-servers=https://10.0.46.136:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/spec-hash": "c221d774cad617a08bf23c15c0008d9ecf2b79d2d44f3ee164a86992d5d9f9ee" }, "creationTimestamp": "2026-04-28T12:04:57Z", "generation": 4, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "858c988757", "revision": "1" }, "name": "apiserver-858c988757", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "e58c6664-a075-4821-8a93-0677c5a83028" } ], "resourceVersion": "48606", "uid": "2e182022-30ef-41ac-90df-ac2d10380fa6" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "858c988757" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "858c988757", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.24.200:2379 \\\n --etcd-servers=https://10.0.46.136:2379 \\\n --etcd-servers=https://10.0.66.149:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "openshiftapiservers.operator.openshift.io/operator-pull-spec": "", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "operator.openshift.io/spec-hash": "2a1476724a93b70c6c0393f6c5c6c8ec7c1164f1aa29e85149f976d481561ee9" }, "creationTimestamp": "2026-04-28T11:56:08Z", "generation": 7, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "cdcc5d65f", "revision": "1" }, "name": "apiserver-cdcc5d65f", "namespace": "openshift-oauth-apiserver", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "apiserver", "uid": "e58c6664-a075-4821-8a93-0677c5a83028" } ], "resourceVersion": "28011", "uid": "77720e2e-456e-4a33-904e-7e8c035fa5fa" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "pod-template-hash": "cdcc5d65f" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "privileged", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-client.secret": "m2vOGw==", "operator.openshift.io/dep-openshift-oauth-apiserver.etcd-serving-ca.configmap": "VpXG2A==", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true", "pod-template-hash": "cdcc5d65f", "revision": "1" }, "name": "openshift-oauth-apiserver" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "apiserver": "true", "app": "openshift-oauth-apiserver", "oauth-apiserver-anti-affinity": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "if [ -s /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem ]; then\n echo \"Copying system trust bundle\"\n cp -f /var/run/configmaps/trusted-ca-bundle/tls-ca-bundle.pem /etc/pki/ca-trust/extracted/pem/tls-ca-bundle.pem\nfi\nexec oauth-apiserver start \\\n --secure-port=8443 \\\n --audit-log-path=/var/log/oauth-apiserver/audit.log \\\n --audit-log-format=json \\\n --audit-log-maxsize=100 \\\n --audit-log-maxbackup=10 \\\n --audit-policy-file=/var/run/configmaps/audit/policy.yaml \\\n --etcd-cafile=/var/run/configmaps/etcd-serving-ca/ca-bundle.crt \\\n --etcd-keyfile=/var/run/secrets/etcd-client/tls.key \\\n --etcd-certfile=/var/run/secrets/etcd-client/tls.crt \\\n --etcd-healthcheck-timeout=9s \\\n --etcd-readycheck-timeout=9s \\\n --shutdown-delay-duration=50s \\\n --shutdown-send-retry-after=true \\\n --tls-private-key-file=/var/run/secrets/serving-cert/tls.key \\\n --tls-cert-file=/var/run/secrets/serving-cert/tls.crt \\\n --enable-priority-and-fairness=false \\\n --api-audiences=https://kubernetes.default.svc \\\n --cors-allowed-origins='//127\\.0\\.0\\.1(:|$)' \\\n --cors-allowed-origins='//localhost(:|$)' \\\n --etcd-servers=https://10.0.192.108:2379 \\\n --etcd-servers=https://10.0.24.200:2379 \\\n --etcd-servers=https://10.0.46.136:2379 \\\n --etcd-servers=https://10.0.66.149:2379 \\\n --tls-cipher-suites=TLS_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384 \\\n --tls-cipher-suites=TLS_ECDHE_ECDSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_CHACHA20_POLY1305_SHA256 \\\n --tls-min-version=VersionTLS12 \\\n --v=2\n" ], "command": [ "/bin/bash", "-ec" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "POD_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "livez?exclude=etcd", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 10 }, "name": "oauth-apiserver", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "readyz?exclude=etcd\u0026exclude=etcd-readiness", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "resources": { "requests": { "cpu": "150m", "memory": "200Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "startupProbe": { "failureThreshold": 30, "httpGet": { "path": "livez", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 5, "successThreshold": 1, "timeoutSeconds": 10 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/audit", "name": "audit-policies" }, { "mountPath": "/var/run/secrets/etcd-client", "name": "etcd-client" }, { "mountPath": "/var/run/configmaps/etcd-serving-ca", "name": "etcd-serving-ca" }, { "mountPath": "/var/run/configmaps/trusted-ca-bundle", "name": "trusted-ca-bundle" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" }, { "mountPath": "/var/run/secrets/encryption-config", "name": "encryption-config" }, { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "chmod 0700 /var/log/oauth-apiserver \u0026\u0026 touch /var/log/oauth-apiserver/audit.log \u0026\u0026 chmod 0600 /var/log/oauth-apiserver/*" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:e2c319fae42e9b32010fd26a9d6b6743bb165d22126a7c6064c4c87faef2d939", "imagePullPolicy": "IfNotPresent", "name": "fix-audit-permissions", "resources": { "requests": { "cpu": "15m", "memory": "50Mi" } }, "securityContext": { "privileged": true, "runAsUser": 0 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/log/oauth-apiserver", "name": "audit-dir" } ] } ], "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "oauth-apiserver-sa", "serviceAccountName": "oauth-apiserver-sa", "terminationGracePeriodSeconds": 120, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "audit-1" }, "name": "audit-policies" }, { "name": "etcd-client", "secret": { "defaultMode": 420, "secretName": "etcd-client" } }, { "configMap": { "defaultMode": 420, "name": "etcd-serving-ca" }, "name": "etcd-serving-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "trusted-ca-bundle", "optional": true }, "name": "trusted-ca-bundle" }, { "name": "encryption-config", "secret": { "defaultMode": 420, "optional": true, "secretName": "encryption-config-1" } }, { "hostPath": { "path": "/var/log/oauth-apiserver", "type": "" }, "name": "audit-dir" } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "kubectl.kubernetes.io/default-logs-container": "manager", "operator.openshift.io/spec-hash": "90fbcfaf16f87100765f1ec0368e618ff0ed2fb6817e379d33a5cc71eaffed23" }, "creationTimestamp": "2026-04-28T11:49:18Z", "generation": 1, "labels": { "control-plane": "operator-controller-controller-manager", "pod-template-hash": "7864455d45" }, "name": "operator-controller-controller-manager-7864455d45", "namespace": "openshift-operator-controller", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "operator-controller-controller-manager", "uid": "a20678c3-c3e0-4821-9aca-7ad094fd2d2f" } ], "resourceVersion": "7825", "uid": "0445caa0-4a0a-4e47-b2a8-9b850186895b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "operator-controller-controller-manager", "pod-template-hash": "7864455d45" } }, "template": { "metadata": { "annotations": { "kubectl.kubernetes.io/default-container": "manager", "openshift.io/required-scc": "privileged", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "control-plane": "operator-controller-controller-manager", "pod-template-hash": "7864455d45" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64", "arm64", "ppc64le", "s390x" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=127.0.0.1:8080", "--leader-elect", "--catalogd-cas-dir=/var/ca-certs", "--v=2", "--global-pull-secret=openshift-config/pull-secret" ], "command": [ "/manager" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/ca-certs" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:a289be85e2b0fb3e884c637c5d4e45df246a5260be06fd9dcbee1e18dc6c7341", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/cache", "name": "cache" }, { "mountPath": "/var/ca-certs", "name": "ca-certs", "readOnly": true }, { "mountPath": "/etc/containers", "name": "etc-containers", "readOnly": true }, { "mountPath": "/etc/docker", "name": "etc-docker", "readOnly": true } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--http2-disable", "--upstream=http://127.0.0.1:8080/", "--logtostderr=true", "--v=2" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "5m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seLinuxOptions": { "type": "spc_t" }, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "operator-controller-controller-manager", "serviceAccountName": "operator-controller-controller-manager", "terminationGracePeriodSeconds": 10, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "cache" }, { "name": "ca-certs", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "operator-controller-trusted-ca-bundle", "optional": false } }, { "configMap": { "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "openshift-service-ca.crt", "optional": false } } ] } }, { "hostPath": { "path": "/etc/containers", "type": "Directory" }, "name": "etc-containers" }, { "hostPath": { "path": "/etc/docker", "type": "Directory" }, "name": "etc-docker" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T11:46:31Z", "generation": 1, "labels": { "app": "catalog-operator", "pod-template-hash": "65f558b987" }, "name": "catalog-operator-65f558b987", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "catalog-operator", "uid": "5066a072-e199-4619-a8b3-9ce18ac32e79" } ], "resourceVersion": "48582", "uid": "77da6fb3-5090-4f42-a554-9b909cc2b4e4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "catalog-operator", "pod-template-hash": "65f558b987" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "catalog-operator", "pod-template-hash": "65f558b987" } }, "spec": { "containers": [ { "args": [ "--namespace", "openshift-marketplace", "--configmapServerImage=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3088b05454e6672b84f3727e824cd5a4a03cf54bfe2b4fc5b7ff6f621122d80e", "--opmImage=quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3088b05454e6672b84f3727e824cd5a4a03cf54bfe2b4fc5b7ff6f621122d80e", "--util-image", "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651", "--writeStatusName", "operator-lifecycle-manager-catalog", "--tls-cert", "/srv-cert/tls.crt", "--tls-key", "/srv-cert/tls.key", "--client-ca", "/profile-collector-cert/tls.crt", "--set-workload-user-id=false" ], "command": [ "/bin/catalog" ], "env": [ { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "catalog-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/srv-cert", "name": "srv-cert", "readOnly": true }, { "mountPath": "/profile-collector-cert", "name": "profile-collector-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "srv-cert", "secret": { "defaultMode": 420, "secretName": "catalog-operator-serving-cert" } }, { "name": "profile-collector-cert", "secret": { "defaultMode": 420, "secretName": "pprof-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T11:46:31Z", "generation": 1, "labels": { "app": "olm-operator", "pod-template-hash": "b87dd97c4" }, "name": "olm-operator-b87dd97c4", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "olm-operator", "uid": "b89cf591-7110-4437-a534-5f5ad9cf74f4" } ], "resourceVersion": "37128", "uid": "6447246f-bf29-4466-869f-4eb3afe4e323" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "olm-operator", "pod-template-hash": "b87dd97c4" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "olm-operator", "pod-template-hash": "b87dd97c4" } }, "spec": { "containers": [ { "args": [ "--namespace", "$(OPERATOR_NAMESPACE)", "--writeStatusName", "operator-lifecycle-manager", "--writePackageServerStatusName", "operator-lifecycle-manager-packageserver", "--tls-cert", "/srv-cert/tls.crt", "--tls-key", "/srv-cert/tls.key", "--client-ca", "/profile-collector-cert/tls.crt", "--protectedCopiedCSVNamespaces", "openshift" ], "command": [ "/bin/olm" ], "env": [ { "name": "OPERATOR_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "OPERATOR_NAME", "value": "olm-operator" }, { "name": "RELEASE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "olm-operator", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "160Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/srv-cert", "name": "srv-cert", "readOnly": true }, { "mountPath": "/profile-collector-cert", "name": "profile-collector-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "srv-cert", "secret": { "defaultMode": 420, "secretName": "olm-operator-serving-cert" } }, { "name": "profile-collector-cert", "secret": { "defaultMode": 420, "secretName": "pprof-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "capability.openshift.io/name": "OperatorLifecycleManager", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true" }, "creationTimestamp": "2026-04-28T11:46:29Z", "generation": 1, "labels": { "app": "package-server-manager", "pod-template-hash": "67955b9b5" }, "name": "package-server-manager-67955b9b5", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "package-server-manager", "uid": "28dcd946-268d-4113-89c1-0a433e3a0dbe" } ], "resourceVersion": "37718", "uid": "965d626e-66e0-489d-9655-ae77eccf8f1b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "package-server-manager", "pod-template-hash": "67955b9b5" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "package-server-manager", "pod-template-hash": "67955b9b5" } }, "spec": { "containers": [ { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:9090/", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "package-server-manager-serving-cert" } ] }, { "args": [ "--name", "$(PACKAGESERVER_NAME)", "--namespace", "$(PACKAGESERVER_NAMESPACE)", "--metrics=:9090" ], "command": [ "/bin/psm", "start" ], "env": [ { "name": "PACKAGESERVER_NAME", "value": "packageserver" }, { "name": "PACKAGESERVER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651" }, { "name": "PACKAGESERVER_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RELEASE_VERSION", "value": "4.18.31" }, { "name": "GOMEMLIMIT", "value": "5MiB" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "package-server-manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "10Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError" } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "package-server-manager-serving-cert", "secret": { "defaultMode": 420, "secretName": "package-server-manager-serving-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T11:50:09Z", "generation": 1, "labels": { "app": "packageserver", "pod-template-hash": "69b6b8f5f7" }, "name": "packageserver-69b6b8f5f7", "namespace": "openshift-operator-lifecycle-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "packageserver", "uid": "681b48fe-8157-4e57-8385-065c43a4be65" } ], "resourceVersion": "36983", "uid": "110be6a9-0dc6-4fa3-8d30-cdacd7d017bc" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "packageserver", "pod-template-hash": "69b6b8f5f7" } }, "template": { "metadata": { "annotations": { "include.release.openshift.io/hypershift": "true", "include.release.openshift.io/ibm-cloud-managed": "true", "include.release.openshift.io/self-managed-high-availability": "true", "olm.operatorGroup": "olm-operators", "olm.operatorNamespace": "openshift-operator-lifecycle-manager", "olm.targetNamespaces": "openshift-operator-lifecycle-manager", "olmcahash": "0f4e2cd190e6db57b299f4b180eb0fca3e295f06287eff6679974b71bf70d47b", "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "packageserver", "pod-template-hash": "69b6b8f5f7" } }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "packageserver" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "command": [ "/bin/package-server", "-v=4", "--secure-port", "5443", "--global-namespace", "openshift-marketplace" ], "env": [ { "name": "OPERATOR_CONDITION_NAME", "value": "packageserver" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:4589eca46d356cf4f39a2ab764e9eb8ac4cde39090a4a057de65d406d1fb7651", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "packageserver", "ports": [ { "containerPort": 5443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "10m", "memory": "50Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmpfs" }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "olm-operator-serviceaccount", "serviceAccountName": "olm-operator-serviceaccount", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "emptyDir": {}, "name": "tmpfs" }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "packageserver-service-cert" } }, { "name": "webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "packageserver-service-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:58:59Z", "generation": 1, "labels": { "control-plane": "gitops-operator", "pod-template-hash": "789fb6456f" }, "name": "openshift-gitops-operator-controller-manager-789fb6456f", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-gitops-operator-controller-manager", "uid": "cab76f9c-95de-492c-98ae-9b376c9da9ec" } ], "resourceVersion": "44438", "uid": "d899bf33-fe87-4440-a8ec-1277ab7d61cf" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "gitops-operator", "pod-template-hash": "789fb6456f" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"AppProject\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"Application\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"ApplicationSet\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"NotificationsConfiguration\",\n \"metadata\": {\n \"name\": \"default-notifications-configuration\"\n },\n \"spec\": {\n \"templates\": {\n \"template.app-created\": \"email:\\n subject: Application {{.app.metadata.name}} has been created.\\nmessage: Application {{.app.metadata.name}} has been created.\\nteams:\\n title: Application {{.app.metadata.name}} has been created.\",\n \"template.app-deleted\": \"email:\\n subject: Application {{.app.metadata.name}} has been deleted.\\nmessage: Application {{.app.metadata.name}} has been deleted.\\nteams:\\n title: Application {{.app.metadata.name}} has been deleted.\",\n \"template.app-deployed\": \"email:\\n subject: New version of an application {{.app.metadata.name}} is up and running.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:white_check_mark:{{end}} Application {{.app.metadata.name}} is now running new version of deployments manifests.\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#18be52\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Revision\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.revision}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Revision\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.revision}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Operation Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#000080'\\n title: New version of an application {{.app.metadata.name}} is up and running.\",\n \"template.app-health-degraded\": \"email:\\n subject: Application {{.app.metadata.name}} has degraded.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} Application {{.app.metadata.name}} has degraded.\\n Application details: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}.\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\": \\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#f4c030\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Health Status\\\",\\n \\\"value\\\": \\\"{{.app.status.health.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Health Status\\\",\\n \\\"value\\\": \\\"{{.app.status.health.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#FF0000'\\n title: Application {{.app.metadata.name}} has degraded.\",\n \"template.app-sync-failed\": \"email:\\n subject: Failed to sync application {{.app.metadata.name}}.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} The sync operation of application {{.app.metadata.name}} has failed at {{.app.status.operationState.finishedAt}} with the following error: {{.app.status.operationState.message}}\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#E96D76\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Failed at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.finishedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Operation\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#FF0000'\\n title: Failed to sync application {{.app.metadata.name}}.\",\n \"template.app-sync-running\": \"email:\\n subject: Start syncing application {{.app.metadata.name}}.\\nmessage: |\\n The sync operation of application {{.app.metadata.name}} has started at {{.app.status.operationState.startedAt}}.\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#0DADEA\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Started at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.startedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Operation\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n title: Start syncing application {{.app.metadata.name}}.\",\n \"template.app-sync-status-unknown\": \"email:\\n subject: Application {{.app.metadata.name}} sync status is 'Unknown'\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:exclamation:{{end}} Application {{.app.metadata.name}} sync is 'Unknown'.\\n Application details: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}.\\n {{if ne .serviceType \\\"slack\\\"}}\\n {{range $c := .app.status.conditions}}\\n * {{$c.message}}\\n {{end}}\\n {{end}}\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#E96D76\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Application\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n title: Application {{.app.metadata.name}} sync status is 'Unknown'\",\n \"template.app-sync-succeeded\": \"email:\\n subject: Application {{.app.metadata.name}} has been successfully synced.\\nmessage: |\\n {{if eq .serviceType \\\"slack\\\"}}:white_check_mark:{{end}} Application {{.app.metadata.name}} has been successfully synced at {{.app.status.operationState.finishedAt}}.\\n Sync operation details are available at: {{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true .\\nslack:\\n attachments: |\\n [{\\n \\\"title\\\": \\\"{{ .app.metadata.name}}\\\",\\n \\\"title_link\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}\\\",\\n \\\"color\\\": \\\"#18be52\\\",\\n \\\"fields\\\": [\\n {\\n \\\"title\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\",\\n \\\"short\\\": true\\n },\\n {\\n \\\"title\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\",\\n \\\"short\\\": true\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"title\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\",\\n \\\"short\\\": true\\n }\\n {{end}}\\n ]\\n }]\\n deliveryPolicy: Post\\n groupingKey: \\\"\\\"\\n notifyBroadcast: false\\nteams:\\n facts: |\\n [{\\n \\\"name\\\": \\\"Sync Status\\\",\\n \\\"value\\\": \\\"{{.app.status.sync.status}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Synced at\\\",\\n \\\"value\\\": \\\"{{.app.status.operationState.finishedAt}}\\\"\\n },\\n {\\n \\\"name\\\": \\\"Repository\\\",\\n \\\"value\\\": \\\"{{.app.spec.source.repoURL}}\\\"\\n }\\n {{range $index, $c := .app.status.conditions}}\\n {{if not $index}},{{end}}\\n {{if $index}},{{end}}\\n {\\n \\\"name\\\": \\\"{{$c.type}}\\\",\\n \\\"value\\\": \\\"{{$c.message}}\\\"\\n }\\n {{end}}\\n ]\\n potentialAction: |-\\n [{\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Operation Details\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.context.argocdUrl}}/applications/{{.app.metadata.name}}?operation=true\\\"\\n }]\\n },\\n {\\n \\\"@type\\\":\\\"OpenUri\\\",\\n \\\"name\\\":\\\"Open Repository\\\",\\n \\\"targets\\\":[{\\n \\\"os\\\":\\\"default\\\",\\n \\\"uri\\\":\\\"{{.app.spec.source.repoURL | call .repo.RepoURLToHTTPS}}\\\"\\n }]\\n }]\\n themeColor: '#000080'\\n title: Application {{.app.metadata.name}} has been successfully synced\"\n },\n \"triggers\": {\n \"trigger.on-created\": \"- description: Application is created.\\n oncePer: app.metadata.name\\n send:\\n - app-created\\n when: \\\"true\\\"\",\n \"trigger.on-deleted\": \"- description: Application is deleted.\\n oncePer: app.metadata.name\\n send:\\n - app-deleted\\n when: app.metadata.deletionTimestamp != nil\",\n \"trigger.on-deployed\": \"- description: Application is synced and healthy. Triggered once per commit.\\n oncePer: app.status.operationState.syncResult.revision\\n send:\\n - app-deployed\\n when: app.status.operationState.phase in ['Succeeded'] and app.status.health.status\\n == 'Healthy'\",\n \"trigger.on-health-degraded\": \"- description: Application has degraded\\n send:\\n - app-health-degraded\\n when: app.status.health.status == 'Degraded'\",\n \"trigger.on-sync-failed\": \"- description: Application syncing has failed\\n send:\\n - app-sync-failed\\n when: app.status.operationState.phase in ['Error', 'Failed']\",\n \"trigger.on-sync-running\": \"- description: Application is being synced\\n send:\\n - app-sync-running\\n when: app.status.operationState.phase in ['Running']\",\n \"trigger.on-sync-status-unknown\": \"- description: Application status is 'Unknown'\\n send:\\n - app-sync-status-unknown\\n when: app.status.sync.status == 'Unknown'\",\n \"trigger.on-sync-succeeded\": \"- description: Application syncing has succeeded\\n send:\\n - app-sync-succeeded\\n when: app.status.operationState.phase in ['Succeeded']\"\n }\n }\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"Rollout\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1alpha1\",\n \"kind\": \"RolloutManager\",\n \"metadata\": {\n \"name\": \"example\"\n },\n \"spec\": null\n },\n {\n \"apiVersion\": \"argoproj.io/v1beta1\",\n \"kind\": \"ArgoCD\",\n \"metadata\": {\n \"name\": \"argocd\"\n },\n \"spec\": {\n \"controller\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"2000m\",\n \"memory\": \"2048Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"1024Mi\"\n }\n }\n },\n \"ha\": {\n \"enabled\": false,\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"rbac\": {\n \"defaultPolicy\": \"\",\n \"policy\": \"g, system:cluster-admins, role:admin\\n\",\n \"scopes\": \"[groups]\"\n },\n \"redis\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"repo\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"1000m\",\n \"memory\": \"1024Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"256Mi\"\n }\n }\n },\n \"resourceExclusions\": \"- apiGroups:\\n - \\\"\\\"\\n - discovery.k8s.io\\n kinds:\\n - Endpoints\\n - EndpointSlice\\n- apiGroups:\\n - apiregistration.k8s.io\\n kinds:\\n - APIService\\n- apiGroups:\\n - coordination.k8s.io\\n kinds:\\n - Lease\\n- apiGroups:\\n - authentication.k8s.io\\n - authorization.k8s.io\\n kinds:\\n - SelfSubjectReview\\n - TokenReview\\n - LocalSubjectAccessReview\\n - SelfSubjectAccessReview\\n - SelfSubjectRulesReview\\n - SubjectAccessReview\\n- apiGroups:\\n - certificates.k8s.io\\n kinds:\\n - CertificateSigningRequest\\n- apiGroups:\\n - cert-manager.io\\n kinds:\\n - CertificateRequest\\n- apiGroups:\\n - cilium.io\\n kinds:\\n - CiliumIdentity\\n - CiliumEndpoint\\n - CiliumEndpointSlice\\n- apiGroups:\\n - kyverno.io\\n - reports.kyverno.io\\n - wgpolicyk8s.io\\n kinds:\\n - PolicyReport\\n - ClusterPolicyReport\\n - EphemeralReport\\n - ClusterEphemeralReport\\n - AdmissionReport\\n - ClusterAdmissionReport\\n - BackgroundScanReport\\n - ClusterBackgroundScanReport\\n - UpdateRequest\\n- apiGroups:\\n - tekton.dev\\n clusters:\\n - '*'\\n kinds:\\n - TaskRun\\n - PipelineRun\\n\",\n \"server\": {\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"125m\",\n \"memory\": \"128Mi\"\n }\n },\n \"route\": {\n \"enabled\": true\n }\n },\n \"sso\": {\n \"dex\": {\n \"openShiftOAuth\": true,\n \"resources\": {\n \"limits\": {\n \"cpu\": \"500m\",\n \"memory\": \"256Mi\"\n },\n \"requests\": {\n \"cpu\": \"250m\",\n \"memory\": \"128Mi\"\n }\n }\n },\n \"provider\": \"dex\"\n }\n }\n },\n {\n \"apiVersion\": \"pipelines.openshift.io/v1alpha1\",\n \"kind\": \"GitopsService\",\n \"metadata\": {\n \"name\": \"gitopsservice-sample\"\n },\n \"spec\": null\n }\n]", "capabilities": "Deep Insights", "console.openshift.io/plugins": "[\"gitops-plugin\"]", "containerImage": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d6d9185b0cade4ee521460ce8285a2fb0686d42b2ba861ce1be9ebe602d622f6", "createdAt": "2026-03-04T06:59:29Z", "description": "Enables teams to adopt GitOps principles for managing cluster configurations and application delivery across hybrid multi-cluster Kubernetes environments.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "", "olm.targetNamespaces": "", "olmcahash": "5dc797e6512b01c0645bf43b9e3a017404f60f9171903710e1594bf6248438b1", "operatorframework.io/cluster-monitoring": "true", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argocd-image-updater.argoproj.io\",\"kind\":\"ImageUpdater\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AnalysisRun\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AnalysisTemplate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"AppProject\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Application\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ApplicationSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ArgoCD\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ArgoCD\",\"version\":\"v1beta1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"ClusterAnalysisTemplate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Experiment\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"NamespaceManagement\",\"version\":\"v1beta1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"NotificationsConfiguration\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"Rollout\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"argoproj.io\",\"kind\":\"RolloutManager\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"pipelines.openshift.io\",\"kind\":\"GitopsService\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-gitops-operator\",\"version\":\"1.20.2\"}}]}", "operatorframework.io/suggested-namespace": "openshift-gitops-operator", "operators.openshift.io/infrastructure-features": "[\"disconnected\"]", "operators.openshift.io/must-gather-image": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:0bbc78d0063324e6ff3feac9673085b4732b8bbff2b1f05240a90e897738417b", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.35.0", "operators.operatorframework.io/internal-objects": "[\"gitopsservices.pipelines.openshift.io\"]", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://github.com/redhat-developer/gitops-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "gitops-operator", "pod-template-hash": "789fb6456f" } }, "spec": { "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=127.0.0.1:8080", "--leader-elect" ], "command": [ "/usr/local/bin/manager" ], "env": [ { "name": "ARGOCD_CLUSTER_CONFIG_NAMESPACES", "value": "openshift-gitops,tssc-gitops" }, { "name": "CLUSTER_SCOPED_ARGO_ROLLOUTS_NAMESPACES", "value": "openshift-gitops" }, { "name": "OPERATOR_NAME", "value": "gitops-operator" }, { "name": "LABEL_SELECTOR" }, { "name": "ENABLE_CONVERSION_WEBHOOK", "value": "true" }, { "name": "RELATED_IMAGE_ARGOCD_DEX_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a" }, { "name": "ARGOCD_DEX_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a" }, { "name": "RELATED_IMAGE_BACKEND_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:3cb24a8c10d7bb3664b4b379eea192c5212470c534f37429802d82306500514f" }, { "name": "BACKEND_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/gitops-rhel9@sha256:3cb24a8c10d7bb3664b4b379eea192c5212470c534f37429802d82306500514f" }, { "name": "RELATED_IMAGE_ARGOCD_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77" }, { "name": "ARGOCD_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77" }, { "name": "ARGOCD_REPOSERVER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77" }, { "name": "RELATED_IMAGE_ARGOCD_REDIS_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3" }, { "name": "ARGOCD_REDIS_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3" }, { "name": "ARGOCD_REDIS_HA_IMAGE", "value": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3" }, { "name": "RELATED_IMAGE_ARGOCD_REDIS_HA_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:f83f1a5094075596f1b02cc8d99baa44be80f69f58864e925ede0b4f63f94fe3" }, { "name": "ARGOCD_REDIS_HA_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-haproxy-router-rhel9@sha256:f83f1a5094075596f1b02cc8d99baa44be80f69f58864e925ede0b4f63f94fe3" }, { "name": "RELATED_IMAGE_GITOPS_CONSOLE_PLUGIN_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:247e31fbbaf50acd865432bf5561ba4d7a46ed397a2ca06116d9f77f70745b01" }, { "name": "GITOPS_CONSOLE_PLUGIN_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/console-plugin-rhel9@sha256:247e31fbbaf50acd865432bf5561ba4d7a46ed397a2ca06116d9f77f70745b01" }, { "name": "RELATED_IMAGE_ARGOCD_EXTENSION_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:01f2083a5780e3265f09b3dadff6637a8f03f80effd6c74ee8861128a5a5e29b" }, { "name": "ARGOCD_EXTENSION_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-extensions-rhel9@sha256:01f2083a5780e3265f09b3dadff6637a8f03f80effd6c74ee8861128a5a5e29b" }, { "name": "RELATED_IMAGE_ARGO_ROLLOUTS_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:1148ea134b04dbc3c3d7ea01247e5b1c4b27f7c65816b6583ff0cb8f87465806" }, { "name": "ARGO_ROLLOUTS_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argo-rollouts-rhel9@sha256:1148ea134b04dbc3c3d7ea01247e5b1c4b27f7c65816b6583ff0cb8f87465806" }, { "name": "RELATED_IMAGE_MUST_GATHER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/must-gather-rhel9@sha256:0bbc78d0063324e6ff3feac9673085b4732b8bbff2b1f05240a90e897738417b" }, { "name": "RELATED_IMAGE_KUBE_RBAC_PROXY_IMAGE", "value": "registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:b473bb5efee9fb78c1e654ef94da9213e29a8eccfda2e8359b7c1b6b4049b554" }, { "name": "ARGOCD_PRINCIPAL_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f40819e802a93e2cee6ce520f6dabb6977c0f5fa503141964dc211112d748a3b" }, { "name": "RELATED_IMAGE_ARGOCD_PRINCIPAL_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f40819e802a93e2cee6ce520f6dabb6977c0f5fa503141964dc211112d748a3b" }, { "name": "ARGOCD_AGENT_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f40819e802a93e2cee6ce520f6dabb6977c0f5fa503141964dc211112d748a3b" }, { "name": "RELATED_IMAGE_ARGOCD_AGENT_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9@sha256:f40819e802a93e2cee6ce520f6dabb6977c0f5fa503141964dc211112d748a3b" }, { "name": "ARGOCD_IMAGE_UPDATER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:87dc8057b7a1fba6ef4adc8f16468147f761eccefef949836fb40c474cd11a4e" }, { "name": "RELATED_IMAGE_ARGOCD_IMAGE_UPDATER_IMAGE", "value": "registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9@sha256:87dc8057b7a1fba6ef4adc8f16468147f761eccefef949836fb40c474cd11a4e" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-gitops-operator.v1.20.2" } ], "image": "registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator@sha256:d6d9185b0cade4ee521460ce8285a2fb0686d42b2ba861ce1be9ebe602d622f6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 9443, "name": "webhook-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] }, { "args": [ "--secure-listen-address=0.0.0.0:8443", "--upstream=http://127.0.0.1:8080", "--tls-cert-file=/etc/tls/private/tls.crt", "--tls-private-key-file=/etc/tls/private/tls.key", "--logtostderr=true", "--allow-paths=/metrics", "--http2-disable" ], "env": [ { "name": "ARGOCD_CLUSTER_CONFIG_NAMESPACES", "value": "openshift-gitops,tssc-gitops" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-gitops-operator.v1.20.2" } ], "image": "registry.redhat.io/openshift4/ose-kube-rbac-proxy-rhel9@sha256:b473bb5efee9fb78c1e654ef94da9213e29a8eccfda2e8359b7c1b6b4049b554", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "128Mi" }, "requests": { "cpu": "1m", "memory": "15Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls/private", "name": "kube-rbac-proxy-tls", "readOnly": true }, { "mountPath": "/apiserver.local.config/certificates", "name": "apiservice-cert" }, { "mountPath": "/tmp/k8s-webhook-server/serving-certs", "name": "webhook-cert" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "openshift-gitops-operator-controller-manager", "serviceAccountName": "openshift-gitops-operator-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "name": "kube-rbac-proxy-tls", "secret": { "defaultMode": 420, "secretName": "kube-rbac-proxy-tls" } }, { "name": "apiservice-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "apiserver.crt" }, { "key": "tls.key", "path": "apiserver.key" } ], "secretName": "openshift-gitops-operator-controller-manager-service-cert" } }, { "name": "webhook-cert", "secret": { "defaultMode": 420, "items": [ { "key": "tls.crt", "path": "tls.crt" }, { "key": "tls.key", "path": "tls.key" } ], "secretName": "openshift-gitops-operator-controller-manager-service-cert" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:10Z", "generation": 1, "labels": { "app": "openshift-pipelines-operator", "name": "openshift-pipelines-operator", "pod-template-hash": "6fdb6bcc9f" }, "name": "openshift-pipelines-operator-6fdb6bcc9f", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "openshift-pipelines-operator", "uid": "7f02aa1c-7c5b-4a70-8b85-f401331f2099" } ], "resourceVersion": "45786", "uid": "d7181fb9-e3e9-4f21-bc6d-2e6042d21b3a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "openshift-pipelines-operator", "pod-template-hash": "6fdb6bcc9f" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"ManualApprovalGate\",\n \"metadata\": {\n \"name\": \"manual-approval-gate\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"OpenShiftPipelinesAsCode\",\n \"metadata\": {\n \"name\": \"pipelines-as-code\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonAddon\",\n \"metadata\": {\n \"name\": \"addon\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonChain\",\n \"metadata\": {\n \"name\": \"chain\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonConfig\",\n \"metadata\": {\n \"name\": \"config\"\n },\n \"spec\": {\n \"addon\": {\n \"params\": [\n {\n \"name\": \"pipelineTemplates\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverTasks\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverStepActions\",\n \"value\": \"true\"\n },\n {\n \"name\": \"communityResolverTasks\",\n \"value\": \"true\"\n }\n ]\n },\n \"params\": [\n {\n \"name\": \"createRbacResource\",\n \"value\": \"true\"\n },\n {\n \"name\": \"legacyPipelineRbac\",\n \"value\": \"true\"\n },\n {\n \"name\": \"createCABundleConfigMaps\",\n \"value\": \"true\"\n }\n ],\n \"profile\": \"all\",\n \"pruner\": {\n \"keep\": 100,\n \"resources\": [\n \"pipelinerun\",\n \"taskrun\"\n ],\n \"schedule\": \"0 8 * * *\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonHub\",\n \"metadata\": {\n \"name\": \"hub\"\n },\n \"spec\": {\n \"api\": {\n \"catalogRefreshInterval\": \"30m\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonInstallerSet\",\n \"metadata\": {\n \"name\": \"foo\"\n },\n \"spec\": {\n \"manifests\": []\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPipeline\",\n \"metadata\": {\n \"name\": \"pipeline\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPruner\",\n \"metadata\": {\n \"name\": \"pruner\"\n },\n \"spec\": {\n \"disabled\": true,\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonResult\",\n \"metadata\": {\n \"name\": \"result\"\n },\n \"spec\": {\n \"auth_disable\": true,\n \"db_enable_auto_migration\": true,\n \"db_host\": \"tekton-results-postgres-service.openshift-pipelines.svc.cluster.local\",\n \"db_port\": 5432,\n \"log_level\": \"debug\",\n \"logging_pvc_name\": \"tekton-logs\",\n \"logs_api\": true,\n \"logs_buffer_size\": 32768,\n \"logs_path\": \"/logs\",\n \"logs_type\": \"File\",\n \"prometheus_port\": 9090,\n \"server_port\": 8080,\n \"targetNamespace\": \"openshift-pipelines\",\n \"tls_hostname_override\": \"tekton-results-api-service.openshift-pipelines.svc.cluster.local\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonTrigger\",\n \"metadata\": {\n \"name\": \"trigger\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Developer Tools, Integration \u0026 Delivery", "certified": "false", "console.openshift.io/plugins": "[\"pipelines-console-plugin\"]", "description": "Red Hat OpenShift Pipelines is a cloud-native CI/CD solution for building pipelines using Tekton concepts which run natively on OpenShift and Kubernetes.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "\u003e=1.20.0 \u003c1.21.1", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"ManualApprovalGate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"OpenShiftPipelinesAsCode\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonAddon\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonChain\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonConfig\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonHub\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonInstallerSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPipeline\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPruner\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonResult\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonTrigger\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-pipelines-operator-rh\",\"version\":\"1.21.1\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/internal-objects": "[\"tektoninstallersets.operator.tekton.dev\", \"tektonconfigs.operator.tekton.dev\",\"tektonpipelines.operator.tekton.dev\",\"tektontriggers.operator.tekton.dev\",\"tektonaddons.operator.tekton.dev\", \"tektonhubs.operator.tekton.dev\", \"tektonresults.operator.tekton.dev\", \"tektonchains.operator.tekton.dev\", \"openshiftpipelinesascodes.operator.tekton.dev\", \"manualapprovalgates.operator.tekton.dev\",\"tektonpruners.operator.tekton.dev\"]", "operators.operatorframework.io/project_layout": "unknown", "repository": "https://github.com/tektoncd/operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "openshift-pipelines-operator", "name": "openshift-pipelines-operator", "pod-template-hash": "6fdb6bcc9f" } }, "spec": { "containers": [ { "args": [ "-controllers", "tektonconfig,tektonpipeline,tektontrigger,tektonhub,tektonchain,tektonaddon,tektonresult,openshiftpipelinesascode,manualapprovalgate,tektonpruner", "-unique-process-name", "tekton-operator-lifecycle" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "PLATFORM", "value": "openshift" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "redhat-openshift-pipelines-operator" }, { "name": "IMAGE_PIPELINES_PROXY", "value": "registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:4747a491c6fd2de939e00dbd9fb12ac4f813bce077c8dfe4463be1e72634602b" }, { "name": "IMAGE_JOB_PRUNER_TKN", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:d437b27347de52003798e4dadfa3827f078792795c3d3a683fcdcb59b6b1db1d" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "VERSION", "value": "1.21.1" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "DEFAULT_TARGET_NAMESPACE", "valueFrom": { "configMapKeyRef": { "key": "DEFAULT_TARGET_NAMESPACE", "name": "tekton-config-defaults" } } }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-config-observability" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "IMAGE_HUB_TEKTON_HUB_DB", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:90ec347a35ab8a5d530c8d09f5347b13cc71df04f3b994bfa8b1a409b1171d59" }, { "name": "IMAGE_ADDONS_PARAM_BUILDER_IMAGE", "value": "registry.redhat.io/rhel9/buildah@sha256:4e604d18fc609d25b2fc99814281944acaac78e8cd5e47b8359709b8b505db86" }, { "name": "IMAGE_ADDONS_PARAM_KN_IMAGE", "value": "registry.redhat.io/openshift-serverless-1/kn-client-kn-rhel9@sha256:e213fd263772c5286aa560132cd8c043cf2946f04f96eedf18cd240859bd8a48" }, { "name": "IMAGE_ADDONS_MVN_SETTINGS", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_SKOPEO_COPY", "value": "registry.redhat.io/rhel9/skopeo@sha256:3c1d54513adc2998955731da23ec354a15942fa7dd2e37dc818f85a947f400d4" }, { "name": "IMAGE_ADDONS_GENERATE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_GEN_ENV_FILE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_PARAM_MAVEN_IMAGE", "value": "registry.redhat.io/ubi9/openjdk-17@sha256:d334d3c36867a1eef7daa598af10b5f620394ca0234b12e71b8b7e99bda9224e" }, { "name": "IMAGE_ADDONS_OC", "value": "image-registry.openshift-image-registry.svc:5000/openshift/cli:latest" }, { "name": "IMAGE_PIPELINES_TEKTON_PIPELINES_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:862f686cb10b000d301bb4b49af39eefb046d6abb7fd2187ef8c59925736c932" }, { "name": "IMAGE_PIPELINES_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:7ce8fca678919af6ad687d11858ecce0d392f478da4e6b57a5ea3e736008341e" }, { "name": "IMAGE_PIPELINES_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:15cd02433813f9809c7bdb16707636f2a4336fe501ac4663abc38ee7cdfeb917" }, { "name": "IMAGE_PIPELINES_TEKTON_EVENTS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:34a30986fb4cdc8edfbb5f39619013ea623fb2f633ee83a384d3b98e4bc133cc" }, { "name": "IMAGE_PIPELINES_ARG__ENTRYPOINT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d" }, { "name": "IMAGE_PIPELINES_ARG__GIT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_PARAM_GITINITIMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_GIT_RUN", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_REPORT", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_GIT_CLONE", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_PREPARE_AND_RUN", "value": "registry.redhat.io/openshift-pipelines/pipelines-git-init-rhel9@sha256:800678e319e2c32d73acde7862ec9e7803a8c9210597ef4e99ea324945e89447" }, { "name": "IMAGE_ADDONS_CACHE_UPLOAD", "value": "registry.redhat.io/openshift-pipelines/pipelines-cache-rhel9@sha256:82ba1d7a148765c8e51a56ab07f8044556ec86212add03fd422f19f8202b5de7" }, { "name": "IMAGE_ADDONS_CACHE_FETCH", "value": "registry.redhat.io/openshift-pipelines/pipelines-cache-rhel9@sha256:82ba1d7a148765c8e51a56ab07f8044556ec86212add03fd422f19f8202b5de7" }, { "name": "IMAGE_PIPELINES_ARG__WORKINGDIRINIT_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:5e4adc0c5619537d0c15175208883e3405d92dcd48566a40c59422905fcac30e" }, { "name": "IMAGE_PIPELINES_ARG__SIDECARLOGRESULTS_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:b5e859d02a515139f799f0fce9446333393461c845ee1cf638747960dc382064" }, { "name": "IMAGE_PIPELINES_ARG__NOP_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:ea0574a3ee9e6be79189c65b589b6b6d666459a80b8c87ec10653d210dbe510d" }, { "name": "IMAGE_PIPELINES_ARG__SHELL_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d" }, { "name": "IMAGE_TRIGGERS_TEKTON_TRIGGERS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:68b3df2abb2eb76d8acc58ecd1872ccb85e76177d9d895fb9c1e722354d090dd" }, { "name": "IMAGE_TRIGGERS_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:c30b1378603e087951a70484ad015d2cc066de6d61f0d8def27f042ff80802f0" }, { "name": "IMAGE_TRIGGERS_TEKTON_TRIGGERS_CORE_INTERCEPTORS", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:1662f3da4827b60da673f6362d7fbe9673a945d965b3556d61e31951a93eb3ee" }, { "name": "IMAGE_TRIGGERS_ARG__EL_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:df87d4d8bad3d7df88ef56cc89eef6d4af76e5d442f0778c52d67582ed952a74" }, { "name": "IMAGE_ADDONS_KN", "value": "registry.redhat.io/openshift-serverless-1/kn-client-kn-rhel9@sha256:e213fd263772c5286aa560132cd8c043cf2946f04f96eedf18cd240859bd8a48" }, { "name": "IMAGE_ADDONS_OPC", "value": "registry.redhat.io/openshift-pipelines/pipelines-opc-rhel9@sha256:e9c148d7532ece3e679fa6d13e75b003e8058489e8059bd611ca537bc61622d5" }, { "name": "IMAGE_ADDONS_SKOPEO_RESULTS", "value": "registry.redhat.io/rhel9/skopeo@sha256:3c1d54513adc2998955731da23ec354a15942fa7dd2e37dc818f85a947f400d4" }, { "name": "IMAGE_ADDONS_BUILD", "value": "registry.redhat.io/rhel9/buildah@sha256:4e604d18fc609d25b2fc99814281944acaac78e8cd5e47b8359709b8b505db86" }, { "name": "IMAGE_ADDONS_S2I_BUILD", "value": "registry.redhat.io/rhel9/buildah@sha256:4e604d18fc609d25b2fc99814281944acaac78e8cd5e47b8359709b8b505db86" }, { "name": "IMAGE_ADDONS_S2I_GENERATE", "value": "registry.redhat.io/source-to-image/source-to-image-rhel9@sha256:bc10e7d6122ede5cf4f2882c200447683255465a1080e826761e90bfb983506e" }, { "name": "IMAGE_ADDONS_LOAD_SCRIPTS", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_MAVEN_GENERATE", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_PREPARE", "value": "registry.redhat.io/ubi9/ubi-minimal@sha256:61d5ad475048c2e655cd46d0a55dfeaec182cc3faa6348cb85989a7c9e196483" }, { "name": "IMAGE_ADDONS_PARAM_TKN_IMAGE", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:d437b27347de52003798e4dadfa3827f078792795c3d3a683fcdcb59b6b1db1d" }, { "name": "IMAGE_ADDONS_TKN", "value": "registry.redhat.io/openshift-pipelines/pipelines-cli-tkn-rhel9@sha256:d437b27347de52003798e4dadfa3827f078792795c3d3a683fcdcb59b6b1db1d" }, { "name": "IMAGE_ADDONS_TKN_CLI_SERVE", "value": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625" }, { "name": "IMAGE_ADDONS_TKN_CLI_SERVE_INIT_CONFIG", "value": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625" }, { "name": "IMAGE_CHAINS_TEKTON_CHAINS_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:77751c15706d768514ad33f2c360ce7e342e9462d5ebde420cb20b2fe4e1de78" }, { "name": "IMAGE_RESULTS_POSTGRES", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:90ec347a35ab8a5d530c8d09f5347b13cc71df04f3b994bfa8b1a409b1171d59" }, { "name": "IMAGE_HUB_TEKTON_HUB_DB_MIGRATION", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-db-migration-rhel9@sha256:ea102b77de3b59ac56c9ea8543c5553e3cf1d712a7169acf83f52bb4616d9e36" }, { "name": "IMAGE_HUB_TEKTON_HUB_API", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-api-rhel9@sha256:89e90575bdafa605b0b196f98bcab56828325a953e74fcb7d1787e0c4242165d" }, { "name": "IMAGE_HUB_TEKTON_HUB_UI", "value": "registry.redhat.io/openshift-pipelines/pipelines-hub-ui-rhel9@sha256:f8692bb593354b163f674c4c53b766697b076dec36460c1b9b58d30b10e5bf3a" }, { "name": "IMAGE_MAG_TEKTON_TASKGROUP_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-controller-rhel9@sha256:d9c4f719c84f09e3e5d17be3545fc71a87dfeb6d8e10b01fb6bf3ebb104f841e" }, { "name": "IMAGE_MAG_MANUAL_APPROVAL", "value": "registry.redhat.io/openshift-pipelines/pipelines-manual-approval-gate-webhook-rhel9@sha256:19b256464b54b825d7c2c3fe07b3807e1daf9e29680f9d7ce9b134f0ff007497" }, { "name": "IMAGE_PRUNER_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pruner-controller-rhel9@sha256:ca3f17907c0f31a6cf2b9d58f53f97078ad189e1eadfe0671262a3a616360207" }, { "name": "IMAGE_PRUNER_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-pruner-webhook-rhel9@sha256:32860b6284883d1c0d8d73333ac930c8ccdb34a94048f31c7aab4f879892a3a6" }, { "name": "IMAGE_PAC_PAC_CONTROLLER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9@sha256:03656ac687c2f3ba6dfd72f7373c6fb67169660a07a579b009c8d8f89b7c0576" }, { "name": "IMAGE_PAC_PAC_WEBHOOK", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel9@sha256:d489fcc781d7ea7017d10297458c19414ce1415fdd0aa41c2e614359c7f6304f" }, { "name": "IMAGE_PAC_PAC_WATCHER", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9@sha256:ab8152479af7d6fe719c90de7de5b7c97c409f8649db724f51e99dec57cb171b" }, { "name": "IMAGE_PAC_PAC_CLI", "value": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-cli-rhel9@sha256:4512fbe386db96e9bf873f2321a748984946df77c8d9cee65252647d9da02636" }, { "name": "IMAGE_RESULTS_WATCHER", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:41427cc1b6689f776e95574529ef9b22a6dde840f23c2b78103416ab37cc5800" }, { "name": "IMAGE_RESULTS_API", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:803e2eeb32b2cc79f4ed8a34f9b1c4ef35c750c3b1cc9352dd0f690dd75ae177" }, { "name": "IMAGE_RESULTS_RETENTION_POLICY_AGENT", "value": "registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:a70f1da59119c9bb43362b87e5bc2b05113e8796b8ca8e1ff0439b66772a7244" }, { "name": "IMAGE_ADDONS_MAVEN_GOALS", "value": "registry.redhat.io/ubi9/openjdk-17@sha256:d334d3c36867a1eef7daa598af10b5f620394ca0234b12e71b8b7e99bda9224e" }, { "name": "IMAGE_PIPELINES_CONSOLE_PLUGIN", "value": "registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:7be2fe2114db1ec77293b48dc1e940f8809f7cb668f2415c1d73c3f9ba9ddbb0" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.21.1" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:382b0a75f78315937335f73a0f841738e3d08a893789c7156314d6cdaaa54417", "imagePullPolicy": "Always", "name": "openshift-pipelines-operator-lifecycle", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" }, { "args": [ "-controllers", "tektoninstallerset", "-unique-process-name", "tekton-operator-cluster-operations" ], "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "redhat-openshift-pipelines-operator" }, { "name": "PROFILING_PORT", "value": "9009" }, { "name": "VERSION", "value": "v0.78.1" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-controller-config-leader-election" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.21.1" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator@sha256:382b0a75f78315937335f73a0f841738e3d08a893789c7156314d6cdaaa54417", "imagePullPolicy": "Always", "name": "openshift-pipelines-operator-cluster-operations", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-pipelines-operator", "serviceAccountName": "openshift-pipelines-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:08Z", "generation": 1, "labels": { "app": "rhdh-operator", "app.kubernetes.io/component": "rhdh-operator", "control-plane": "controller-manager", "pod-template-hash": "59964cd46f" }, "name": "rhdh-operator-59964cd46f", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhdh-operator", "uid": "075529f1-59f9-447c-b1e1-ef084bc982fa" } ], "resourceVersion": "45719", "uid": "4c83d1db-ae0f-4b8e-8c96-476e7a3e93f4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "rhdh-operator", "pod-template-hash": "59964cd46f" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhdh.redhat.com/v1alpha3\",\n \"kind\": \"Backstage\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/name\": \"backstage\"\n },\n \"name\": \"developer-hub\"\n }\n },\n {\n \"apiVersion\": \"rhdh.redhat.com/v1alpha4\",\n \"kind\": \"Backstage\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/name\": \"backstage\"\n },\n \"name\": \"developer-hub\"\n }\n },\n {\n \"apiVersion\": \"rhdh.redhat.com/v1alpha5\",\n \"kind\": \"Backstage\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/name\": \"backstage\"\n },\n \"name\": \"developer-hub\"\n }\n }\n]", "capabilities": "Seamless Upgrades", "categories": "Developer Tools", "certified": "true", "containerImage": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:2a1f7829c8d1e004bd140f5df42d2399fad74204ef849b143bfee06990619b31", "createdAt": "2026-03-23T20:29:00Z", "description": "Red Hat Developer Hub is a Red Hat supported version of Backstage. It comes with pre-built plug-ins and configuration settings, supports use of an external database, and can help streamline the process of setting up a self-managed internal developer portal for adopters who are just starting out.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha3\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha4\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhdh.redhat.com\",\"kind\":\"Backstage\",\"version\":\"v1alpha5\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhdh\",\"version\":\"1.9.3\"}}]}", "operatorframework.io/suggested-namespace": "rhdh-operator", "operators.openshift.io/valid-subscription": "[\"Red Hat Developer Hub\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://gitlab.cee.redhat.com/rhidp/rhdh/", "skipRange": "\u003e=1.0.0 \u003c1.9.3", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "rhdh-operator", "app.kubernetes.io/component": "rhdh-operator", "control-plane": "controller-manager", "pod-template-hash": "59964cd46f" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/arch", "operator": "In", "values": [ "amd64" ] }, { "key": "kubernetes.io/os", "operator": "In", "values": [ "linux" ] } ] } ] } } }, "automountServiceAccountToken": true, "containers": [ { "args": [ "--health-probe-bind-address=:8081", "--metrics-bind-address=:8443", "--metrics-secure=true", "--leader-elect" ], "command": [ "/manager" ], "env": [ { "name": "OPERATOR_NAME", "value": "rhdh-operator" }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "RELATED_IMAGE_postgresql", "value": "registry.redhat.io/rhel9/postgresql-15@sha256:8a00879923de4ed645006786a211c6fccc46b578db09edb58090a0a2bdca7a27" }, { "name": "RELATED_IMAGE_backstage", "value": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:12a7f6cc89bf4364c038090b2b6532d90ab006444489f66a75c0d11da9f6e567" }, { "name": "RELATED_IMAGE_catalog_index", "value": "registry.access.redhat.com/rhdh/plugin-catalog-index@sha256:7685bc0f28b4ae5fe41bb60bb807700be8572cc3a1d39c12cf5f82955684134c" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhdh-operator.v1.9.3" } ], "image": "registry.redhat.io/rhdh/rhdh-rhel9-operator@sha256:2a1f7829c8d1e004bd140f5df42d2399fad74204ef849b143bfee06990619b31", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": "health", "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8081, "name": "health", "protocol": "TCP" }, { "containerPort": 8443, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": "health", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "ephemeral-storage": "20Mi", "memory": "1Gi" }, "requests": { "cpu": "10m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/default-config", "name": "default-config" }, { "mountPath": "/plugin-deps", "name": "plugin-deps" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "rhdh-controller-manager", "serviceAccountName": "rhdh-controller-manager", "terminationGracePeriodSeconds": 10, "volumes": [ { "configMap": { "defaultMode": 420, "name": "rhdh-default-config" }, "name": "default-config" }, { "configMap": { "defaultMode": 420, "name": "rhdh-plugin-deps", "optional": true }, "name": "plugin-deps" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:58:46Z", "generation": 1, "labels": { "control-plane": "operator-controller-manager", "pod-template-hash": "78bffc549d" }, "name": "rhtas-operator-controller-manager-78bffc549d", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhtas-operator-controller-manager", "uid": "44823b5c-9235-4980-8d95-f3abadeeca6a" } ], "resourceVersion": "43079", "uid": "c92a545e-99b4-4d63-b6c1-36110e2cc1d4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "operator-controller-manager", "pod-template-hash": "78bffc549d" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"CTlog\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"ctlog-sample\"\n },\n \"spec\": {}\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Fulcio\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"fulcio-sample\"\n },\n \"spec\": {\n \"certificate\": {\n \"commonName\": \"fulcio.hostname\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"config\": {\n \"OIDCIssuers\": [\n {\n \"ClientID\": \"trusted-artifact-signer\",\n \"Issuer\": \"https://your-oidc-issuer-url\",\n \"IssuerURL\": \"https://your-oidc-issuer-url\",\n \"Type\": \"email\"\n }\n ]\n },\n \"externalAccess\": {\n \"enabled\": true\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Rekor\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"rekor-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Securesign\",\n \"metadata\": {\n \"annotations\": {\n \"rhtas.redhat.com/metrics\": \"true\"\n },\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"securesign-sample\"\n },\n \"spec\": {\n \"ctlog\": {\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"fulcio\": {\n \"certificate\": {\n \"commonName\": \"fulcio.hostname\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"config\": {\n \"OIDCIssuers\": [\n {\n \"ClientID\": \"trusted-artifact-signer\",\n \"Issuer\": \"https://your-oidc-issuer-url\",\n \"IssuerURL\": \"https://your-oidc-issuer-url\",\n \"Type\": \"email\"\n }\n ]\n },\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"rekor\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"trillian\": {\n \"database\": {\n \"create\": true\n },\n \"monitoring\": {\n \"enabled\": true\n }\n },\n \"tsa\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n },\n \"ntpMonitoring\": {\n \"enabled\": true\n },\n \"signer\": {\n \"certificateChain\": {\n \"intermediateCA\": [\n {\n \"commonName\": \"tsa.hostname-intermediate\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n ],\n \"leafCA\": {\n \"commonName\": \"tsa.hostname-leaf\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"rootCA\": {\n \"commonName\": \"tsa.hostname-root\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n }\n }\n },\n \"tuf\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"keys\": [\n {\n \"name\": \"rekor.pub\"\n },\n {\n \"name\": \"ctfe.pub\"\n },\n {\n \"name\": \"fulcio_v1.crt.pem\"\n },\n {\n \"name\": \"tsa.certchain.pem\"\n }\n ],\n \"pvc\": {\n \"accessModes\": [\n \"ReadWriteOnce\"\n ],\n \"retain\": true,\n \"size\": \"100Mi\"\n },\n \"rootKeySecretRef\": {\n \"name\": \"tuf-root-keys\"\n }\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"TimestampAuthority\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/created-by\": \"rhtas-operator\",\n \"app.kubernetes.io/instance\": \"timestampauthority-sample\",\n \"app.kubernetes.io/managed-by\": \"kustomize\",\n \"app.kubernetes.io/name\": \"timestampauthority\",\n \"app.kubernetes.io/part-of\": \"rhtas-operator\"\n },\n \"name\": \"timestampauthority-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"monitoring\": {\n \"enabled\": true\n },\n \"ntpMonitoring\": {\n \"enabled\": true\n },\n \"signer\": {\n \"certificateChain\": {\n \"intermediateCA\": [\n {\n \"commonName\": \"tsa.hostname-intermediate\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n ],\n \"leafCA\": {\n \"commonName\": \"tsa.hostname-leaf\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n },\n \"rootCA\": {\n \"commonName\": \"tsa.hostname-root\",\n \"organizationEmail\": \"jdoe@redhat.com\",\n \"organizationName\": \"Red Hat\"\n }\n }\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Trillian\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"trillian-sample\"\n },\n \"spec\": {\n \"database\": {\n \"create\": true\n },\n \"server\": {\n \"replicas\": 1\n },\n \"signer\": {\n \"replicas\": 1\n }\n }\n },\n {\n \"apiVersion\": \"rhtas.redhat.com/v1alpha1\",\n \"kind\": \"Tuf\",\n \"metadata\": {\n \"labels\": {\n \"app.kubernetes.io/instance\": \"securesign-sample\",\n \"app.kubernetes.io/name\": \"securesign-sample\",\n \"app.kubernetes.io/part-of\": \"trusted-artifact-signer\"\n },\n \"name\": \"tuf-sample\"\n },\n \"spec\": {\n \"externalAccess\": {\n \"enabled\": true\n },\n \"keys\": [\n {\n \"name\": \"rekor.pub\",\n \"secretRef\": {\n \"key\": \"public\",\n \"name\": \"rekor-pub-key\"\n }\n },\n {\n \"name\": \"fulcio_v1.crt.pem\",\n \"secretRef\": {\n \"key\": \"cert\",\n \"name\": \"fulcio-pub-key\"\n }\n },\n {\n \"name\": \"ctfe.pub\",\n \"secretRef\": {\n \"key\": \"public\",\n \"name\": \"ctlog-pub-key\"\n }\n },\n {\n \"name\": \"tsa.certchain.pem\",\n \"secretRef\": {\n \"key\": \"certificateChain\",\n \"name\": \"tsa-cert-chain\"\n }\n }\n ],\n \"pvc\": {\n \"accessModes\": [\n \"ReadWriteMany\"\n ],\n \"retain\": true,\n \"size\": \"100Mi\"\n }\n }\n }\n]", "capabilities": "Seamless Upgrades", "containerImage": "registry.redhat.io/rhtas/rhtas-rhel9-operator@sha256:1d97e631c15e5b2f10de5c394e207f0f110a4720f3fbb8986b90932cd3059f93", "createdAt": "2026-04-16T14:50:18Z", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"CTlog\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Fulcio\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Rekor\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Securesign\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"TimestampAuthority\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Trillian\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtas.redhat.com\",\"kind\":\"Tuf\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhtas-operator\",\"version\":\"1.3.4\"}}]}", "operators.openshift.io/valid-subscription": "[\"Red Hat Trusted Artifact Signer\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.36.1-ocp", "operators.operatorframework.io/project_layout": "go.kubebuilder.io/v4", "repository": "https://github.com/securesign/secure-sign-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "operator-controller-manager", "pod-template-hash": "78bffc549d" } }, "spec": { "containers": [ { "args": [ "--leader-elect", "--metrics-bind-address=0.0.0.0:8080" ], "command": [ "/manager" ], "env": [ { "name": "OPENSHIFT", "value": "true" }, { "name": "RELATED_IMAGE_TRILLIAN_LOG_SIGNER", "value": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:f211db01228530de8ed46b05189c492e6c3629df1098da57d31f2765a22ef014" }, { "name": "RELATED_IMAGE_TRILLIAN_LOG_SERVER", "value": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:523fa259ebf067ac3076748d4f5c86e01e5b1960034c0876add5d67b0ca21b0b" }, { "name": "RELATED_IMAGE_TRILLIAN_DB", "value": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:ab5c3e921b58d17bf6b596d2d7acf64a28b34f3f3a66720c1a07e6555ed9e0b8" }, { "name": "RELATED_IMAGE_TRILLIAN_NETCAT", "value": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1" }, { "name": "RELATED_IMAGE_CREATETREE", "value": "registry.redhat.io/rhtas/createtree-rhel9@sha256:163edb41ea7f64afc8333ee14d4b28161f7017285afcca6ca12238732c77b98d" }, { "name": "RELATED_IMAGE_FULCIO_SERVER", "value": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:2d478c389bc89afc6b331bc662a84dfc1bbb9da2681ab6dc5ad36f44c346699a" }, { "name": "RELATED_IMAGE_REKOR_MONITOR", "value": "registry.redhat.io/rhtas/rekor-monitor-rhel9@sha256:5f9cefb77c78ded0062fda73b6589767813de9448a845fe91e72cfe22df1f386" }, { "name": "RELATED_IMAGE_REKOR_REDIS", "value": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6" }, { "name": "RELATED_IMAGE_REKOR_SERVER", "value": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:b4a5a2c2518dba5f7812c8b4112e25a0f867a4b187c23adfc727395f871c8ca6" }, { "name": "RELATED_IMAGE_REKOR_SEARCH_UI", "value": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:204dc28f6182267851d39eff08649e921877e2771d2c39acb798aa7896f5bcef" }, { "name": "RELATED_IMAGE_BACKFILL_REDIS", "value": "registry.redhat.io/rhtas/rekor-backfill-redis-rhel9@sha256:35b00d6cc82f90b4577af0d2c15153e255d6bb946349bb85f175216cefad1d07" }, { "name": "RELATED_IMAGE_TUF", "value": "registry.redhat.io/rhtas/tuffer-rhel9@sha256:3516168bd98b02eec2b6ffc247549a04dbb4483e7be4d08b63569f469e4a1f66" }, { "name": "RELATED_IMAGE_CTLOG", "value": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:95b5aefafd17dd44794f6d5d1e75278faa5a74f2472db667409d1c88caaef1f1" }, { "name": "RELATED_IMAGE_HTTP_SERVER", "value": "registry.redhat.io/ubi9/httpd-24@sha256:7a48172cdda2a565001998fac2f3aeaa65677f080dd9cb3f9e26ef0963afdef0" }, { "name": "RELATED_IMAGE_SEGMENT_REPORTING", "value": "registry.redhat.io/rhtas/segment-reporting-rhel9@sha256:5d9f194515a383a350f0f7f610de9d9b5e555b792cc1e1b3577cf84bcfd82499" }, { "name": "RELATED_IMAGE_TIMESTAMP_AUTHORITY", "value": "registry.redhat.io/rhtas/timestamp-authority-rhel9@sha256:a4aae20d4d24fc780fd7f613a54c6587538007b23e2a84b826c6812a19abd9ed" }, { "name": "RELATED_IMAGE_CLIENT_SERVER", "value": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhtas-operator.v1.3.4" } ], "image": "registry.redhat.io/rhtas/rhtas-rhel9-operator@sha256:1d97e631c15e5b2f10de5c394e207f0f110a4720f3fbb8986b90932cd3059f93", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "ports": [ { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "rhtas-operator-controller-manager", "serviceAccountName": "rhtas-operator-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:11Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "6c8b8979cd" }, "name": "tekton-operator-webhook-6c8b8979cd", "namespace": "openshift-operators", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-webhook", "uid": "7d1ccd3b-2c30-4ff7-b049-6d6939dc2844" } ], "resourceVersion": "45218", "uid": "ee656f2f-966f-467e-9a41-4bf772bd2dca" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator-webhook", "pod-template-hash": "6c8b8979cd" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"ManualApprovalGate\",\n \"metadata\": {\n \"name\": \"manual-approval-gate\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"OpenShiftPipelinesAsCode\",\n \"metadata\": {\n \"name\": \"pipelines-as-code\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonAddon\",\n \"metadata\": {\n \"name\": \"addon\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonChain\",\n \"metadata\": {\n \"name\": \"chain\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonConfig\",\n \"metadata\": {\n \"name\": \"config\"\n },\n \"spec\": {\n \"addon\": {\n \"params\": [\n {\n \"name\": \"pipelineTemplates\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverTasks\",\n \"value\": \"true\"\n },\n {\n \"name\": \"resolverStepActions\",\n \"value\": \"true\"\n },\n {\n \"name\": \"communityResolverTasks\",\n \"value\": \"true\"\n }\n ]\n },\n \"params\": [\n {\n \"name\": \"createRbacResource\",\n \"value\": \"true\"\n },\n {\n \"name\": \"legacyPipelineRbac\",\n \"value\": \"true\"\n },\n {\n \"name\": \"createCABundleConfigMaps\",\n \"value\": \"true\"\n }\n ],\n \"profile\": \"all\",\n \"pruner\": {\n \"keep\": 100,\n \"resources\": [\n \"pipelinerun\",\n \"taskrun\"\n ],\n \"schedule\": \"0 8 * * *\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonHub\",\n \"metadata\": {\n \"name\": \"hub\"\n },\n \"spec\": {\n \"api\": {\n \"catalogRefreshInterval\": \"30m\"\n },\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonInstallerSet\",\n \"metadata\": {\n \"name\": \"foo\"\n },\n \"spec\": {\n \"manifests\": []\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPipeline\",\n \"metadata\": {\n \"name\": \"pipeline\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonPruner\",\n \"metadata\": {\n \"name\": \"pruner\"\n },\n \"spec\": {\n \"disabled\": true,\n \"targetNamespace\": \"openshift-pipelines\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonResult\",\n \"metadata\": {\n \"name\": \"result\"\n },\n \"spec\": {\n \"auth_disable\": true,\n \"db_enable_auto_migration\": true,\n \"db_host\": \"tekton-results-postgres-service.openshift-pipelines.svc.cluster.local\",\n \"db_port\": 5432,\n \"log_level\": \"debug\",\n \"logging_pvc_name\": \"tekton-logs\",\n \"logs_api\": true,\n \"logs_buffer_size\": 32768,\n \"logs_path\": \"/logs\",\n \"logs_type\": \"File\",\n \"prometheus_port\": 9090,\n \"server_port\": 8080,\n \"targetNamespace\": \"openshift-pipelines\",\n \"tls_hostname_override\": \"tekton-results-api-service.openshift-pipelines.svc.cluster.local\"\n }\n },\n {\n \"apiVersion\": \"operator.tekton.dev/v1alpha1\",\n \"kind\": \"TektonTrigger\",\n \"metadata\": {\n \"name\": \"trigger\"\n },\n \"spec\": {\n \"targetNamespace\": \"openshift-pipelines\"\n }\n }\n]", "capabilities": "Full Lifecycle", "categories": "Developer Tools, Integration \u0026 Delivery", "certified": "false", "console.openshift.io/plugins": "[\"pipelines-console-plugin\"]", "description": "Red Hat OpenShift Pipelines is a cloud-native CI/CD solution for building pipelines using Tekton concepts which run natively on OpenShift and Kubernetes.", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "true", "features.operators.openshift.io/proxy-aware": "true", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "global-operators", "olm.operatorNamespace": "openshift-operators", "olm.skipRange": "\u003e=1.20.0 \u003c1.21.1", "olm.targetNamespaces": "", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"ManualApprovalGate\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"OpenShiftPipelinesAsCode\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonAddon\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonChain\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonConfig\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonHub\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonInstallerSet\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPipeline\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonPruner\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonResult\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"operator.tekton.dev\",\"kind\":\"TektonTrigger\",\"version\":\"v1alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"openshift-pipelines-operator-rh\",\"version\":\"1.21.1\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.37.0", "operators.operatorframework.io/internal-objects": "[\"tektoninstallersets.operator.tekton.dev\", \"tektonconfigs.operator.tekton.dev\",\"tektonpipelines.operator.tekton.dev\",\"tektontriggers.operator.tekton.dev\",\"tektonaddons.operator.tekton.dev\", \"tektonhubs.operator.tekton.dev\", \"tektonresults.operator.tekton.dev\", \"tektonchains.operator.tekton.dev\", \"openshiftpipelinesascodes.operator.tekton.dev\", \"manualapprovalgates.operator.tekton.dev\",\"tektonpruners.operator.tekton.dev\"]", "operators.operatorframework.io/project_layout": "unknown", "repository": "https://github.com/tektoncd/operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator-webhook", "pod-template-hash": "6c8b8979cd" } }, "spec": { "containers": [ { "env": [ { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-webhook-config-leader-election" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-webhook" }, { "name": "WEBHOOK_SECRET_NAME", "value": "tekton-operator-webhook-certs" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "PLATFORM", "value": "openshift" }, { "name": "AUTOINSTALL_COMPONENTS", "value": "false" }, { "name": "OPERATOR_CONDITION_NAME", "value": "openshift-pipelines-operator-rh.v1.21.1" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-operator-webhook-rhel9@sha256:7d79d27acad66cc8b34f0a38c7ad1f9663b80c4712e7659b1637cda597ff7248", "imagePullPolicy": "IfNotPresent", "name": "tekton-operator-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "openshift-pipelines-operator", "serviceAccountName": "openshift-pipelines-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "2", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "kubernetes.io/description": "This deployment launches the ovn-kubernetes controller (control-plane) networking components.\n", "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:48:00Z", "generation": 1, "labels": { "app": "ovnkube-control-plane", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "pod-template-hash": "b5d9b686b", "type": "infra" }, "name": "ovnkube-control-plane-b5d9b686b", "namespace": "openshift-ovn-kubernetes", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "ovnkube-control-plane", "uid": "39a8c629-1d40-4646-a9d7-87494ed273da" } ], "resourceVersion": "4176", "uid": "75eae91e-f1db-409b-a21f-c8366ed3bb5d" }, "spec": { "replicas": 2, "selector": { "matchLabels": { "app": "ovnkube-control-plane", "pod-template-hash": "b5d9b686b" } }, "template": { "metadata": { "annotations": { "networkoperator.openshift.io/cluster-network-cidr": "10.128.0.0/14", "networkoperator.openshift.io/hybrid-overlay-status": "disabled", "networkoperator.openshift.io/ip-family-mode": "single-stack", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "ovnkube-control-plane", "component": "network", "kubernetes.io/os": "linux", "openshift.io/component": "network", "pod-template-hash": "b5d9b686b", "type": "infra" } }, "spec": { "containers": [ { "command": [ "/bin/bash", "-c", "#!/bin/bash\nset -euo pipefail\nTLS_PK=/etc/pki/tls/metrics-cert/tls.key\nTLS_CERT=/etc/pki/tls/metrics-cert/tls.crt\n# As the secret mount is optional we must wait for the files to be present.\n# The service is created in monitor.yaml and this is created in sdn.yaml.\nTS=$(date +%s)\nWARN_TS=$(( ${TS} + $(( 20 * 60)) ))\nHAS_LOGGED_INFO=0\n\nlog_missing_certs(){\n CUR_TS=$(date +%s)\n if [[ \"${CUR_TS}\" -gt \"WARN_TS\" ]]; then\n echo $(date -Iseconds) WARN: ovn-control-plane-metrics-cert not mounted after 20 minutes.\n elif [[ \"${HAS_LOGGED_INFO}\" -eq 0 ]] ; then\n echo $(date -Iseconds) INFO: ovn-control-plane-metrics-cert not mounted. Waiting 20 minutes.\n HAS_LOGGED_INFO=1\n fi\n}\nwhile [[ ! -f \"${TLS_PK}\" || ! -f \"${TLS_CERT}\" ]] ; do\n log_missing_certs\n sleep 5\ndone\n\necho $(date -Iseconds) INFO: ovn-control-plane-metrics-certs mounted, starting kube-rbac-proxy\nexec /usr/bin/kube-rbac-proxy \\\n --logtostderr \\\n --secure-listen-address=:9108 \\\n --tls-cipher-suites=TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256,TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256 \\\n --upstream=http://127.0.0.1:29108/ \\\n --tls-private-key-file=${TLS_PK} \\\n --tls-cert-file=${TLS_CERT}\n" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:86800d7a823cf444db8393dd7ffa735b2e42e9120f3f869487b0a2ed6b0db73d", "imagePullPolicy": "IfNotPresent", "name": "kube-rbac-proxy", "ports": [ { "containerPort": 9108, "name": "https", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "20Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/etc/pki/tls/metrics-cert", "name": "ovn-control-plane-metrics-cert", "readOnly": true } ] }, { "command": [ "/bin/bash", "-c", "set -xe\nif [[ -f \"/env/_master\" ]]; then\n set -o allexport\n source \"/env/_master\"\n set +o allexport\nfi\n\novn_v4_join_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v4_join_subnet_opt=\"--gateway-v4-join-subnet \"\nfi\novn_v6_join_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v6_join_subnet_opt=\"--gateway-v6-join-subnet \"\nfi\n\novn_v4_transit_switch_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v4_transit_switch_subnet_opt=\"--cluster-manager-v4-transit-switch-subnet \"\nfi\novn_v6_transit_switch_subnet_opt=\nif [[ \"\" != \"\" ]]; then\n ovn_v6_transit_switch_subnet_opt=\"--cluster-manager-v6-transit-switch-subnet \"\nfi\n\ndns_name_resolver_enabled_flag=\nif [[ \"false\" == \"true\" ]]; then\n dns_name_resolver_enabled_flag=\"--enable-dns-name-resolver\"\nfi\n\npersistent_ips_enabled_flag=\nif [[ \"true\" == \"true\" ]]; then\n persistent_ips_enabled_flag=\"--enable-persistent-ips\"\nfi\n\n# This is needed so that converting clusters from GA to TP\n# will rollout control plane pods as well\nnetwork_segmentation_enabled_flag=\nmulti_network_enabled_flag=\nif [[ \"true\" == \"true\" ]]; then\n multi_network_enabled_flag=\"--enable-multi-network\"\n network_segmentation_enabled_flag=\"--enable-network-segmentation\"\nfi\n\nroute_advertisements_enable_flag=\nif [[ \"false\" == \"true\" ]]; then\n route_advertisements_enable_flag=\"--enable-route-advertisements\"\nfi\n\necho \"I$(date \"+%m%d %H:%M:%S.%N\") - ovnkube-control-plane - start ovnkube --init-cluster-manager ${K8S_NODE}\"\nexec /usr/bin/ovnkube \\\n --enable-interconnect \\\n --init-cluster-manager \"${K8S_NODE}\" \\\n --config-file=/run/ovnkube-config/ovnkube.conf \\\n --loglevel \"${OVN_KUBE_LOG_LEVEL}\" \\\n --metrics-bind-address \"127.0.0.1:29108\" \\\n --metrics-enable-pprof \\\n --metrics-enable-config-duration \\\n ${ovn_v4_join_subnet_opt} \\\n ${ovn_v6_join_subnet_opt} \\\n ${ovn_v4_transit_switch_subnet_opt} \\\n ${ovn_v6_transit_switch_subnet_opt} \\\n ${dns_name_resolver_enabled_flag} \\\n ${persistent_ips_enabled_flag} \\\n ${multi_network_enabled_flag} \\\n ${network_segmentation_enabled_flag} \\\n ${route_advertisements_enable_flag}\n" ], "env": [ { "name": "OVN_KUBE_LOG_LEVEL", "value": "4" }, { "name": "K8S_NODE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "spec.nodeName" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:3da709f5fb3ceb7e3e06711fd50adad02bb66b858b76ef56f705eba1dc14bc16", "imagePullPolicy": "IfNotPresent", "name": "ovnkube-cluster-manager", "ports": [ { "containerPort": 29108, "name": "metrics-port", "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "300Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/run/ovnkube-config/", "name": "ovnkube-config" }, { "mountPath": "/env", "name": "env-overrides" } ] } ], "dnsPolicy": "Default", "hostNetwork": true, "nodeSelector": { "kubernetes.io/os": "linux", "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ovn-kubernetes-control-plane", "serviceAccountName": "ovn-kubernetes-control-plane", "terminationGracePeriodSeconds": 30, "tolerations": [ { "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "key": "node.kubernetes.io/not-ready", "operator": "Exists" }, { "key": "node.kubernetes.io/unreachable", "operator": "Exists" }, { "key": "node.kubernetes.io/network-unavailable", "operator": "Exists" } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "ovnkube-config" }, "name": "ovnkube-config" }, { "configMap": { "defaultMode": 420, "name": "env-overrides", "optional": true }, "name": "env-overrides" }, { "name": "ovn-control-plane-metrics-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "ovn-control-plane-metrics-cert" } } ] } } }, "status": { "availableReplicas": 2, "fullyLabeledReplicas": 2, "observedGeneration": 1, "readyReplicas": 2, "replicas": 2 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:52Z", "generation": 1, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "fa2cfb68cc1b2a80c7adc6a689630221", "pod-template-hash": "7d958d5d5d" }, "name": "pipelines-as-code-controller-7d958d5d5d", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-controller", "uid": "3f272403-e80a-4519-94a4-281d0381bc5f" } ], "resourceVersion": "55109", "uid": "874d2f85-3a33-4ba5-82a0-e3e48b38e27a" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7d958d5d5d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "fa2cfb68cc1b2a80c7adc6a689630221", "pod-template-hash": "7d958d5d5d" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-controller" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "K_METRICS_CONFIG", "value": "{\"Domain\":\"pipelinesascode.tekton.dev/controller\",\"Component\":\"pac_controller\",\"PrometheusPort\":9090,\"ConfigMap\":{\"name\":\"pipelines-as-code-config-observability\"}}" }, { "name": "K_SINK_TIMEOUT", "value": "30" }, { "name": "K_TRACING_CONFIG", "value": "{\"backend\":\"prometheus\",\"debug\":\"false\",\"sample-rate\":\"0\"}" }, { "name": "PAC_CONTROLLER_CONFIGMAP", "value": "pipelines-as-code" }, { "name": "PAC_CONTROLLER_LABEL", "value": "default" }, { "name": "PAC_CONTROLLER_SECRET", "value": "pipelines-as-code-secret" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TLS_CERT", "value": "cert" }, { "name": "TLS_KEY", "value": "key" }, { "name": "TLS_SECRET_NAME", "value": "pipelines-as-code-tls-secret" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-controller-rhel9@sha256:03656ac687c2f3ba6dfd72f7373c6fb67169660a07a579b009c8d8f89b7c0576", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "pac-controller", "ports": [ { "containerPort": 8082, "name": "api", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "api", "scheme": "HTTP" }, "periodSeconds": 15, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/pipelines-as-code/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-controller", "serviceAccountName": "pipelines-as-code-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "pipelines-as-code-tls-secret" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:52Z", "generation": 1, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "8258d02df45cdbf20a1640da7b5bc1b4", "pod-template-hash": "7c997594c4" }, "name": "pipelines-as-code-watcher-7c997594c4", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-watcher", "uid": "269490f0-fc0d-47ad-9edd-9aee4cfca470" } ], "resourceVersion": "55210", "uid": "f0a2ad34-20c4-4cd2-9135-fc1cfe2717af" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "7c997594c4" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-as-code-watcher", "app.kubernetes.io/component": "watcher", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "watcher", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "8258d02df45cdbf20a1640da7b5bc1b4", "pod-template-hash": "7c997594c4" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-watcher" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-watcher-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "pipelines-as-code-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-watcher-rhel9@sha256:ab8152479af7d6fe719c90de7de5b7c97c409f8649db724f51e99dec57cb171b", "imagePullPolicy": "Always", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "pac-watcher", "ports": [ { "containerPort": 8080, "name": "probes", "protocol": "TCP" }, { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/live", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-watcher", "serviceAccountName": "pipelines-as-code-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:52Z", "generation": 1, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "41e51166a122e3e803f896a8c4485f12", "pod-template-hash": "78d8f488c" }, "name": "pipelines-as-code-webhook-78d8f488c", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-as-code-webhook", "uid": "bec14aa0-8ec2-4bf0-86d6-46cc51d59b41" } ], "resourceVersion": "55104", "uid": "e18092ad-d120-402b-b435-883dfa2dbc71" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "pod-template-hash": "78d8f488c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "pipelines-as-code", "app.kubernetes.io/version": "v0.39.5", "operator.tekton.dev/deployment-spec-applied-hash": "41e51166a122e3e803f896a8c4485f12", "pod-template-hash": "78d8f488c" } }, "spec": { "containers": [ { "command": [ "/ko-app/pipelines-as-code-webhook" ], "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "pac-webhook-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "pac-config-logging" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipelinesascode" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "pipelines-as-code-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "pipelines-as-code-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-pipelines-as-code-webhook-rhel9@sha256:d489fcc781d7ea7017d10297458c19414ce1415fdd0aa41c2e614359c7f6304f", "imagePullPolicy": "IfNotPresent", "name": "pac-webhook", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "pipelines-as-code-webhook", "serviceAccountName": "pipelines-as-code-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:06:05Z", "generation": 1, "labels": { "app": "pipelines-console-plugin", "app.kubernetes.io/part-of": "tekton-config", "name": "pipelines-console-plugin", "pod-template-hash": "59df77ccc8" }, "name": "pipelines-console-plugin-59df77ccc8", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "pipelines-console-plugin", "uid": "0f2fdeaf-0457-4387-89da-bde963d867b4" } ], "resourceVersion": "55389", "uid": "63f30de0-9210-47ad-b6f0-3094e24238be" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "pipelines-console-plugin", "name": "pipelines-console-plugin", "pod-template-hash": "59df77ccc8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "pipelines-console-plugin", "app.kubernetes.io/part-of": "tekton-config", "name": "pipelines-console-plugin", "pod-template-hash": "59df77ccc8" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-pipelines/pipelines-console-plugin-rhel9@sha256:7be2fe2114db1ec77293b48dc1e940f8809f7cb668f2415c1d73c3f9ba9ddbb0", "imagePullPolicy": "Always", "name": "pipelines-console-plugin", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/cert", "name": "pipelines-console-plugin-cert", "readOnly": true }, { "mountPath": "/etc/nginx/nginx.conf", "name": "nginx-conf", "readOnly": true, "subPath": "nginx.conf" }, { "mountPath": "/var/lib/nginx/tmp", "name": "nginx-tmp" }, { "mountPath": "/var/cache/nginx", "name": "nginx-cache" }, { "mountPath": "/var/run", "name": "nginx-run" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pipelines-console-plugin-cert", "secret": { "defaultMode": 420, "secretName": "pipelines-console-plugin-cert" } }, { "configMap": { "defaultMode": 420, "name": "pipelines-console-plugin" }, "name": "nginx-conf" }, { "emptyDir": {}, "name": "nginx-tmp" }, { "emptyDir": {}, "name": "nginx-cache" }, { "emptyDir": {}, "name": "nginx-run" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:44Z", "generation": 1, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "e6df66e7c28d2f03648160282f14b74a", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "5c59b754bc", "version": "v0.26.2" }, "name": "tekton-chains-controller-5c59b754bc", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-chains-controller", "uid": "c11b16f7-d606-45f7-89b1-761afb4a7b56" } ], "resourceVersion": "52965", "uid": "02ea65ef-f3f2-41b8-8ffe-e6c31144d176" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "pod-template-hash": "5c59b754bc" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-chains-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "e6df66e7c28d2f03648160282f14b74a", "pipeline.tekton.dev/release": "v0.26.2", "pod-template-hash": "5c59b754bc", "version": "v0.26.2" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-chains" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-chains-config-leader-election" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-chains-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/chains" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-chains-controller-rhel9@sha256:77751c15706d768514ad33f2c360ce7e342e9462d5ebde420cb20b2fe4e1de78", "imagePullPolicy": "IfNotPresent", "name": "tekton-chains-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/signing-secrets", "name": "signing-secrets" }, { "mountPath": "/var/run/sigstore/cosign", "name": "oidc-info" }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-chains-controller", "serviceAccountName": "tekton-chains-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "signing-secrets", "secret": { "defaultMode": 420, "secretName": "signing-secrets" } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "serviceAccountToken": { "audience": "sigstore", "expirationSeconds": 600, "path": "oidc-token" } } ] } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:11Z", "generation": 1, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "173ec50dbc8530bcfa30448ca1cc490d", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "7f5b66d8fd", "version": "v1.6.1" }, "name": "tekton-events-controller-7f5b66d8fd", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-events-controller", "uid": "955ee63d-4e8b-440d-b22e-92233a603db5" } ], "resourceVersion": "52107", "uid": "ca66722a-9cd3-464b-b60b-6cdf8666a96f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "7f5b66d8fd" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-events-controller", "app.kubernetes.io/component": "events", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "events", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "173ec50dbc8530bcfa30448ca1cc490d", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "7f5b66d8fd", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } } }, "containers": [ { "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-events" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-events-rhel9@sha256:34a30986fb4cdc8edfbb5f39619013ea623fb2f633ee83a384d3b98e4bc133cc", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-events-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" }, { "mountPath": "/etc/ssl/certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/etc/ssl/certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-events-controller", "serviceAccountName": "tekton-events-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:11Z", "generation": 1, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "691f32c8ee88be653a0bc77734ee2834", "pod-template-hash": "6b596b4bd8" }, "name": "tekton-operator-proxy-webhook-6b596b4bd8", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-operator-proxy-webhook", "uid": "b03dbafb-89cd-4564-9781-f703ad18fbfc" } ], "resourceVersion": "51962", "uid": "1a9572c2-211a-4ad3-8610-48ea41b5e46b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "tekton-operator", "pod-template-hash": "6b596b4bd8" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-operator", "name": "tekton-operator", "operator.tekton.dev/deployment-spec-applied-hash": "691f32c8ee88be653a0bc77734ee2834", "pod-template-hash": "6b596b4bd8" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-operator-proxy-webhook-config-leader-election" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/operator" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "proxy-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-operator-proxy-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-operator-proxy-rhel9@sha256:4747a491c6fd2de939e00dbd9fb12ac4f813bce077c8dfe4463be1e72634602b", "imagePullPolicy": "IfNotPresent", "name": "proxy", "ports": [ { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-operators-proxy-webhook", "serviceAccountName": "tekton-operators-proxy-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:11Z", "generation": 1, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6e033dba5687d6a92015681e75e280b1", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "bb5b59f54", "version": "v1.6.1" }, "name": "tekton-pipelines-controller-bb5b59f54", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-controller", "uid": "20d53367-ac79-49da-a5fb-145382c2cfa7" } ], "resourceVersion": "52102", "uid": "3f2fbcc5-13e1-43a2-90e4-65c11583cc66" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "bb5b59f54" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "6e033dba5687d6a92015681e75e280b1", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "bb5b59f54", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-entrypoint-image", "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d", "-nop-image", "registry.redhat.io/openshift-pipelines/pipelines-nop-rhel9@sha256:ea0574a3ee9e6be79189c65b589b6b6d666459a80b8c87ec10653d210dbe510d", "-sidecarlogresults-image", "registry.redhat.io/openshift-pipelines/pipelines-sidecarlogresults-rhel9@sha256:b5e859d02a515139f799f0fce9446333393461c845ee1cf638747960dc382064", "-workingdirinit-image", "registry.redhat.io/openshift-pipelines/pipelines-workingdirinit-rhel9@sha256:5e4adc0c5619537d0c15175208883e3405d92dcd48566a40c59422905fcac30e", "-shell-image", "registry.redhat.io/openshift-pipelines/pipelines-entrypoint-rhel9@sha256:fd9f6bc408772348ae540701c6bf2b178028362801acb748e1dde80c06eba70d", "-shell-image-win", "mcr.microsoft.com/powershell:nanoserver@sha256:b6d5ff841b78bdf2dfed7550000fd4f3437385b8fa686ec0f010be24777654d6", "-disable-ha=false" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-controller" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "CONFIG_SPIRE", "value": "config-spire" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "SSL_CERT_DIR", "value": "/etc/ssl/certs" }, { "name": "SSL_CERT_FILE", "value": "/etc/config-registry-cert/cert" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-controller-rhel9@sha256:862f686cb10b000d301bb4b49af39eefb046d6abb7fd2187ef8c59925736c932", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "tekton-pipelines-controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/config-logging", "name": "config-logging" }, { "mountPath": "/etc/config-registry-cert", "name": "config-registry-cert" }, { "mountPath": "/etc/ssl/certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/etc/ssl/certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-controller", "serviceAccountName": "tekton-pipelines-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "config-logging" }, "name": "config-logging" }, { "configMap": { "defaultMode": 420, "name": "config-registry-cert" }, "name": "config-registry-cert" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:11Z", "generation": 1, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "7b855a5f254ef58a66d5c00940807af2", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "cd44fc77", "version": "v1.6.1" }, "name": "tekton-pipelines-remote-resolvers-cd44fc77", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-remote-resolvers", "uid": "a7b4c59d-81dc-456c-b981-d9226f1e13a4" } ], "resourceVersion": "52019", "uid": "c46f3c08-aeda-4487-9d6e-04d1be47ef46" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "cd44fc77" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-resolvers", "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "7b855a5f254ef58a66d5c00940807af2", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "cd44fc77", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "resolvers", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "resolvers", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "command": [ "/sbin/tini", "--", "/ko-app/resolvers" ], "env": [ { "name": "ARTIFACT_HUB_API", "value": "https://artifacthub.io/" }, { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-resolvers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/resolution" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_HUB_API" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9@sha256:15cd02433813f9809c7bdb16707636f2a4336fe501ac4663abc38ee7cdfeb917", "imagePullPolicy": "IfNotPresent", "name": "controller", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "1", "memory": "4Gi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tmp", "name": "tmp-clone-volume" }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-resolvers", "serviceAccountName": "tekton-pipelines-resolvers", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": { "sizeLimit": "4Gi" }, "name": "tmp-clone-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:11Z", "generation": 1, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "28a6c479f3f830e710ab5a08517751f4", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "bd7fdc457", "version": "v1.6.1" }, "name": "tekton-pipelines-webhook-bd7fdc457", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-pipelines-webhook", "uid": "430fe7cf-f9d6-4c79-bf4b-55287d612152" } ], "resourceVersion": "52114", "uid": "5fecb356-4515-42a5-a75b-4d94cfb0b5b9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "pod-template-hash": "bd7fdc457" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-pipelines-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines", "app.kubernetes.io/version": "v1.6.1", "operator.tekton.dev/deployment-spec-applied-hash": "28a6c479f3f830e710ab5a08517751f4", "pipeline.tekton.dev/release": "v1.6.1", "pod-template-hash": "bd7fdc457", "version": "v1.6.1" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-pipelines" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "CONFIG_FEATURE_FLAGS_NAME", "value": "feature-flags" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/pipeline" }, { "name": "PROBES_PORT", "value": "8080" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_ADMISSION_CONTROLLER_NAME", "value": "webhook.pipeline.tekton.dev" }, { "name": "WEBHOOK_PORT", "value": "8443" }, { "name": "WEBHOOK_SECRET_NAME", "value": "webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-pipelines-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-webhook-rhel9@sha256:7ce8fca678919af6ad687d11858ecce0d392f478da4e6b57a5ea3e736008341e", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "webhook", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "probes", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readiness", "port": "probes", "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": { "limits": { "cpu": "500m", "memory": "500Mi" }, "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsGroup": 65532, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-pipelines-webhook", "serviceAccountName": "tekton-pipelines-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:50Z", "generation": 1, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "31c7e1a485cb13c13b568fbedf898d86", "pod-template-hash": "645b58656d" }, "name": "tekton-results-api-645b58656d", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-api", "uid": "ebd068bc-96d8-421c-ac55-812e319870be" } ], "resourceVersion": "54061", "uid": "bca141e2-a1e0-4af3-88bc-45fc5e2663b1" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2", "pod-template-hash": "645b58656d" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-api", "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "31c7e1a485cb13c13b568fbedf898d86", "pod-template-hash": "645b58656d" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-api", "app.kubernetes.io/version": "v0.17.2" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "env": [ { "name": "DB_HOST", "value": "tekton-results-postgres-service.openshift-pipelines.svc.cluster.local" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "IS_EXTERNAL_DB", "value": "false" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "LOGGING_PLUGIN_TLS_VERIFICATION_DISABLE", "value": "false" }, { "name": "ROUTE_ENABLED", "value": "true" }, { "name": "ROUTE_TLS_TERMINATION", "value": "edge" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9@sha256:803e2eeb32b2cc79f4ed8a34f9b1c4ef35c750c3b1cc9352dd0f690dd75ae177", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "api", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 10, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-api", "serviceAccountName": "tekton-results-api", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:50Z", "generation": 1, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "a5ce2114bfbf8041d5092ce0540ef7b4", "pod-template-hash": "747bc489d" }, "name": "tekton-results-retention-policy-agent-747bc489d", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-retention-policy-agent", "uid": "0259f6e8-7eb1-4c7e-9bd8-9e0a64b29968" } ], "resourceVersion": "53228", "uid": "3f668224-9253-4158-b342-6ff279b6220b" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.17.2", "pod-template-hash": "747bc489d" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-retention-policy-agent", "app.kubernetes.io/name": "tekton-results-retention-policy-agent", "app.kubernetes.io/version": "v0.17.2", "operator.tekton.dev/deployment-spec-applied-hash": "a5ce2114bfbf8041d5092ce0540ef7b4", "pod-template-hash": "747bc489d" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_PASSWORD", "name": "tekton-results-postgres" } } }, { "name": "DB_USER", "valueFrom": { "secretKeyRef": { "key": "POSTGRES_USER", "name": "tekton-results-postgres" } } }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-retention-policy-agent-rhel9@sha256:a70f1da59119c9bb43362b87e5bc2b05113e8796b8ca8e1ff0439b66772a7244", "imagePullPolicy": "IfNotPresent", "name": "retention-policy-agent", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tekton/results", "name": "config", "readOnly": true }, { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "tekton-results-api-config" }, "name": "config" }, { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:50Z", "generation": 1, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "ff0a5cf8350df4c2d44bf2ec024250f8", "pod-template-hash": "6574987ffc" }, "name": "tekton-results-watcher-6574987ffc", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-results-watcher", "uid": "81000517-2419-4eea-b271-06c48a9f6d54" } ], "resourceVersion": "53268", "uid": "29f6a9bc-8d64-4302-a62b-90b44ee7fc26" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2", "pod-template-hash": "6574987ffc" } }, "template": { "metadata": { "annotations": { "cluster-autoscaler.kubernetes.io/safe-to-evict": "false" }, "creationTimestamp": null, "labels": { "app": "tekton-results-watcher", "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2", "deployment.spec.replicas": "1", "operator.tekton.dev/deployment-spec-applied-hash": "ff0a5cf8350df4c2d44bf2ec024250f8", "pod-template-hash": "6574987ffc" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/name": "tekton-results-watcher", "app.kubernetes.io/version": "v0.17.2" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-api_addr", "$(TEKTON_RESULTS_API_SERVICE)", "-auth_mode", "$(AUTH_MODE)" ], "env": [ { "name": "AUTH_MODE", "value": "token" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "tekton-results-config-leader-election" }, { "name": "CONFIG_LOGGING_NAME", "value": "tekton-results-config-logging" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "tekton-results-config-observability" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/results" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "TEKTON_RESULTS_API_SERVICE", "value": "tekton-results-api-service.openshift-pipelines.svc.cluster.local:8080" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-results-watcher-rhel9@sha256:41427cc1b6689f776e95574529ef9b22a6dde840f23c2b78103416ab37cc5800", "imagePullPolicy": "IfNotPresent", "name": "watcher", "ports": [ { "containerPort": 9090, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-results-watcher", "serviceAccountName": "tekton-results-watcher", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "tekton-results-tls" } }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:32Z", "generation": 1, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "2f54ebefd857020d5d8c532df23ee9b7", "pod-template-hash": "c769879ff", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" }, "name": "tekton-triggers-controller-c769879ff", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-controller", "uid": "5f84ee01-9374-4ca5-810f-959ea4a30bc3" } ], "resourceVersion": "52629", "uid": "0954f0e0-b610-431b-a0f4-237e51c83b34" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "c769879ff" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-controller", "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "2f54ebefd857020d5d8c532df23ee9b7", "pod-template-hash": "c769879ff", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" } }, "spec": { "affinity": { "nodeAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": { "nodeSelectorTerms": [ { "matchExpressions": [ { "key": "kubernetes.io/os", "operator": "NotIn", "values": [ "windows" ] } ] } ] } }, "podAntiAffinity": { "preferredDuringSchedulingIgnoredDuringExecution": [ { "podAffinityTerm": { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "controller", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "controller", "app.kubernetes.io/part-of": "tekton-triggers" } }, "topologyKey": "kubernetes.io/hostname" }, "weight": 100 } ] } }, "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO", "-el-image", "registry.redhat.io/openshift-pipelines/pipelines-triggers-eventlistenersink-rhel9@sha256:df87d4d8bad3d7df88ef56cc89eef6d4af76e5d442f0778c52d67582ed952a74", "-el-port", "8080", "-el-security-context=true", "-el-read-only-root-filesystem=true", "-el-events", "enable", "-el-readtimeout", "5", "-el-writetimeout", "40", "-el-idletimeout", "120", "-el-timeouthandler", "30", "-el-httpclient-readtimeout", "30", "-el-httpclient-keep-alive", "30", "-el-httpclient-tlshandshaketimeout", "10", "-el-httpclient-responseheadertimeout", "10", "-el-httpclient-expectcontinuetimeout", "1", "-period-seconds", "10", "-failure-threshold", "3" ], "env": [ { "name": "CONFIG_DEFAULTS_NAME", "value": "config-defaults-triggers" }, { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-controllers" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "METRICS_PROMETHEUS_PORT", "value": "9000" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-controller-rhel9@sha256:68b3df2abb2eb76d8acc58ecd1872ccb85e76177d9d895fb9c1e722354d090dd", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-controller", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-controller", "serviceAccountName": "tekton-triggers-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:32Z", "generation": 1, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "627d37671a8eaaa776b716cbfd3f9729", "pod-template-hash": "dd9ffc4d5", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" }, "name": "tekton-triggers-core-interceptors-dd9ffc4d5", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-core-interceptors", "uid": "dc1a6cc6-b367-43db-958c-2e289f277f83" } ], "resourceVersion": "52755", "uid": "9f83a493-1f66-446a-8c5e-46b7c678a9f9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "dd9ffc4d5" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-core-interceptors", "app.kubernetes.io/component": "interceptors", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "core-interceptors", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "627d37671a8eaaa776b716cbfd3f9729", "pod-template-hash": "dd9ffc4d5", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" } }, "spec": { "containers": [ { "args": [ "-logtostderr", "-stderrthreshold", "INFO" ], "env": [ { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "CONFIG_OBSERVABILITY_NAME", "value": "config-observability-triggers" }, { "name": "INTERCEPTOR_TLS_SECRET_NAME", "value": "tekton-triggers-core-interceptors-certs" }, { "name": "INTERCEPTOR_TLS_SVC_NAME", "value": "tekton-triggers-core-interceptors" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-core-interceptors-rhel9@sha256:1662f3da4827b60da673f6362d7fbe9673a945d965b3556d61e31951a93eb3ee", "imagePullPolicy": "IfNotPresent", "name": "tekton-triggers-core-interceptors", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ready", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-core-interceptors", "serviceAccountName": "tekton-triggers-core-interceptors", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:32Z", "generation": 1, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "3214376621786fd6f100c2bfc8559d73", "pod-template-hash": "56c9d7d56", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" }, "name": "tekton-triggers-webhook-56c9d7d56", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tekton-triggers-webhook", "uid": "cbaa12be-cbc7-4980-bcbf-a8a27fa58996" } ], "resourceVersion": "52557", "uid": "6c02d62b-5df3-4708-a5f8-a846b5c0c1ed" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "pod-template-hash": "56c9d7d56" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tekton-triggers-webhook", "app.kubernetes.io/component": "webhook", "app.kubernetes.io/instance": "default", "app.kubernetes.io/name": "webhook", "app.kubernetes.io/part-of": "tekton-triggers", "app.kubernetes.io/version": "v0.34.0", "operator.tekton.dev/deployment-spec-applied-hash": "3214376621786fd6f100c2bfc8559d73", "pod-template-hash": "56c9d7d56", "triggers.tekton.dev/release": "v0.34.0", "version": "v0.34.0" } }, "spec": { "containers": [ { "env": [ { "name": "CONFIG_LEADERELECTION_NAME", "value": "config-leader-election-triggers-webhook" }, { "name": "CONFIG_LOGGING_NAME", "value": "config-logging-triggers" }, { "name": "KUBERNETES_MIN_VERSION", "value": "v1.0.0" }, { "name": "METRICS_DOMAIN", "value": "tekton.dev/triggers" }, { "name": "SSL_CERT_DIR", "value": "/tekton-custom-certs:/etc/ssl/certs:/etc/pki/tls/certs" }, { "name": "SYSTEM_NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "WEBHOOK_SECRET_NAME", "value": "triggers-webhook-certs" }, { "name": "WEBHOOK_SERVICE_NAME", "value": "tekton-triggers-webhook" } ], "image": "registry.redhat.io/openshift-pipelines/pipelines-triggers-webhook-rhel9@sha256:c30b1378603e087951a70484ad015d2cc066de6d61f0d8def27f042ff80802f0", "imagePullPolicy": "IfNotPresent", "name": "webhook", "ports": [ { "containerPort": 9000, "name": "metrics", "protocol": "TCP" }, { "containerPort": 8008, "name": "profiling", "protocol": "TCP" }, { "containerPort": 8443, "name": "https-webhook", "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/tekton-custom-certs/ca-bundle.crt", "name": "config-trusted-cabundle-volume", "readOnly": true, "subPath": "ca-bundle.crt" }, { "mountPath": "/tekton-custom-certs/service-ca.crt", "name": "config-service-cabundle-volume", "readOnly": true, "subPath": "service-ca.crt" }, { "mountPath": "/etc/pki/ca-trust/extracted/pem", "name": "config-trusted-system-cabundle-volume", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tekton-triggers-webhook", "serviceAccountName": "tekton-triggers-webhook", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "ca-bundle.crt" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "service-ca.crt", "path": "service-ca.crt" } ], "name": "config-service-cabundle" }, "name": "config-service-cabundle-volume" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "ca-bundle.crt", "path": "tls-ca-bundle.pem" } ], "name": "config-trusted-cabundle" }, "name": "config-trusted-system-cabundle-volume" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:27Z", "generation": 1, "labels": { "app": "tkn-cli-serve", "pod-template-hash": "6c5976cb68" }, "name": "tkn-cli-serve-6c5976cb68", "namespace": "openshift-pipelines", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tkn-cli-serve", "uid": "b3e43239-f94c-4625-8a35-b8050dda8066" } ], "resourceVersion": "54793", "uid": "4afa6ece-8996-49a2-a1c8-413e1c6d0482" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "tkn-cli-serve", "pod-template-hash": "6c5976cb68" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tkn-cli-serve", "pod-template-hash": "6c5976cb68" } }, "spec": { "containers": [ { "image": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625", "imagePullPolicy": "IfNotPresent", "name": "tkn-cli-serve", "ports": [ { "containerPort": 8080, "protocol": "TCP" } ], "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/httpd", "name": "httpd-config" }, { "mountPath": "/var/log/httpd", "name": "httpd-logs" }, { "mountPath": "/opt/app-root", "name": "app-root" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "cp -rL /etc/httpd/* /httpd-config/ 2\u003e/dev/null || true\nfind /httpd-config -type f -exec chmod u+w {} \\;\ncp -rL /opt/app-root/* /app-root/ 2\u003e/dev/null || true\nfind /app-root -type f -exec chmod u+w {} \\;\n" ], "image": "registry.redhat.io/openshift-pipelines/pipelines-serve-tkn-cli-rhel9@sha256:5566ebbc75f2a2a911f3cc884f969a3c45104341a99e51a795c6bc31ce43e625", "imagePullPolicy": "IfNotPresent", "name": "tkn-cli-serve-init-config", "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/httpd-config", "name": "httpd-config" }, { "mountPath": "/app-root", "name": "app-root" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "httpd-config" }, { "emptyDir": {}, "name": "httpd-logs" }, { "emptyDir": {}, "name": "app-root" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "4", "operator.openshift.io/spec-hash": "89c020f060d9b3363f6eccdc9194ff1fc058c4822424c6fdf181177531dfc868", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:55:51Z", "generation": 7, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "59f858578", "route-controller-manager": "true" }, "name": "route-controller-manager-59f858578", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f56f0bd9-3255-4662-9d79-ba3ccbcd8b85" } ], "resourceVersion": "22076", "uid": "029c3275-bbd4-4afe-863b-f7a7ed23cfaf" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "59f858578", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "15425", "configmaps/config": "15464", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "59f858578", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 7, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "3", "operator.openshift.io/spec-hash": "d605df50373a7832bc7740de15d306ab9e195a614d594026c93237da487618b9", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:55:51Z", "generation": 3, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5cfd76f47f", "route-controller-manager": "true" }, "name": "route-controller-manager-5cfd76f47f", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f56f0bd9-3255-4662-9d79-ba3ccbcd8b85" } ], "resourceVersion": "16813", "uid": "6525fa9f-66b3-46c7-903a-a7ed2210a516" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "5cfd76f47f", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "15425", "configmaps/config": "8993", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "5cfd76f47f", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "5", "operator.openshift.io/spec-hash": "ec37f572acaf9af5e80c12ab4d84dc8cc2e4faab9e1ced9e2487335fe0b16c88", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:58:28Z", "generation": 4, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "746cddc76d", "route-controller-manager": "true" }, "name": "route-controller-manager-746cddc76d", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f56f0bd9-3255-4662-9d79-ba3ccbcd8b85" } ], "resourceVersion": "48634", "uid": "ef00f4f2-4774-4985-b112-31c6d39e4a72" }, "spec": { "replicas": 3, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "746cddc76d", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "15425", "configmaps/config": "21161", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "3", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "746cddc76d", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "availableReplicas": 3, "fullyLabeledReplicas": 3, "observedGeneration": 4, "readyReplicas": 3, "replicas": 3 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "f06ca53177493fb20b280b6bae60582d55bdadc02164cc7c9dfd921198ccb198", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:49:05Z", "generation": 4, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "754f98b496", "route-controller-manager": "true" }, "name": "route-controller-manager-754f98b496", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f56f0bd9-3255-4662-9d79-ba3ccbcd8b85" } ], "resourceVersion": "15532", "uid": "295c2870-f57f-43db-9402-3d88fb830266" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "754f98b496", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "5866", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "754f98b496", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 4, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "3", "deployment.kubernetes.io/max-replicas": "3", "deployment.kubernetes.io/revision": "2", "operator.openshift.io/spec-hash": "fd14759edf83254b9c8671c221a2a699b7572e13701304d555ea6ec3bdccdae0", "release.openshift.io/version": "4.18.31" }, "creationTimestamp": "2026-04-28T11:49:43Z", "generation": 3, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "85749f8f9d", "route-controller-manager": "true" }, "name": "route-controller-manager-85749f8f9d", "namespace": "openshift-route-controller-manager", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "route-controller-manager", "uid": "f56f0bd9-3255-4662-9d79-ba3ccbcd8b85" } ], "resourceVersion": "15726", "uid": "998b7bc9-83fd-4e78-9609-38b997c1cb6e" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app": "route-controller-manager", "pod-template-hash": "85749f8f9d", "route-controller-manager": "true" } }, "template": { "metadata": { "annotations": { "configmaps/client-ca": "0", "configmaps/config": "8993", "openshift.io/required-scc": "restricted-v2", "openshiftcontrollermanagers.operator.openshift.io/cluster": "2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "pod-template-hash": "85749f8f9d", "route-controller-manager": "true" }, "name": "route-controller-manager" }, "spec": { "affinity": { "podAntiAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app": "route-controller-manager", "openshift-route-controller-manager-anti-affinity": "true", "route-controller-manager": "true" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "--config=/var/run/configmaps/config/config.yaml", "-v=2" ], "command": [ "route-controller-manager", "start" ], "env": [ { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:10b8ec9bc4fab402acfa66b5c3a9843dc5fd98cc940460602e13704c70f34f78", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "route-controller-manager", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 10, "httpGet": { "path": "healthz", "port": 8443, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "100m", "memory": "100Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/configmaps/client-ca", "name": "client-ca" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-node-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "route-controller-manager-sa", "serviceAccountName": "route-controller-manager-sa", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "configMap": { "defaultMode": 420, "name": "config" }, "name": "config" }, { "configMap": { "defaultMode": 420, "name": "client-ca" }, "name": "client-ca" }, { "name": "serving-cert", "secret": { "defaultMode": 420, "secretName": "serving-cert" } } ] } } }, "status": { "observedGeneration": 3, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "include.release.openshift.io/self-managed-high-availability": "true", "include.release.openshift.io/single-node-developer": "true" }, "creationTimestamp": "2026-04-28T11:46:15Z", "generation": 1, "labels": { "app": "service-ca-operator", "pod-template-hash": "5cf4b4cd55" }, "name": "service-ca-operator-5cf4b4cd55", "namespace": "openshift-service-ca-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca-operator", "uid": "48dc9e3f-cd59-4f96-84f3-6a3c69adbd76" } ], "resourceVersion": "36766", "uid": "d358e14e-ce00-451e-a552-6af2750bc3da" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca-operator", "pod-template-hash": "5cf4b4cd55" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "nonroot-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca-operator", "pod-template-hash": "5cf4b4cd55" }, "name": "service-ca-operator" }, "spec": { "containers": [ { "args": [ "--config=/var/run/configmaps/config/operator-config.yaml", "-v=2" ], "command": [ "service-ca-operator", "operator" ], "env": [ { "name": "CONTROLLER_IMAGE", "value": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9ebfca0971d391cb2a23a5f145580bf70025653dd963e5aa93dd0a5dc9571272" }, { "name": "OPERATOR_IMAGE_VERSION", "value": "4.18.31" } ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9ebfca0971d391cb2a23a5f145580bf70025653dd963e5aa93dd0a5dc9571272", "imagePullPolicy": "IfNotPresent", "name": "service-ca-operator", "resources": { "requests": { "cpu": "10m", "memory": "80Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/configmaps/config", "name": "config" }, { "mountPath": "/var/run/secrets/serving-cert", "name": "serving-cert" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsGroup": 1001, "runAsNonRoot": true, "runAsUser": 1001, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "service-ca-operator", "serviceAccountName": "service-ca-operator", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "serving-cert", "secret": { "defaultMode": 420, "optional": true, "secretName": "serving-cert" } }, { "configMap": { "defaultMode": 420, "name": "service-ca-operator-config" }, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1", "operator.openshift.io/spec-hash": "a1e0a664528b42f60c72c9b485c16c5b189df0d29f139eb4e824dde79e1d7fa7" }, "creationTimestamp": "2026-04-28T11:49:06Z", "generation": 1, "labels": { "app": "service-ca", "pod-template-hash": "7dc4878458", "service-ca": "true" }, "name": "service-ca-7dc4878458", "namespace": "openshift-service-ca", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "service-ca", "uid": "ca782691-ed91-47ea-bbe7-d0d84f5e24c7" } ], "resourceVersion": "6382", "uid": "dd309526-cf98-4126-905f-f4dae60d4e7f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "service-ca", "pod-template-hash": "7dc4878458", "service-ca": "true" } }, "template": { "metadata": { "annotations": { "openshift.io/required-scc": "restricted-v2", "target.workload.openshift.io/management": "{\"effect\": \"PreferredDuringScheduling\"}" }, "creationTimestamp": null, "labels": { "app": "service-ca", "pod-template-hash": "7dc4878458", "service-ca": "true" }, "name": "service-ca" }, "spec": { "containers": [ { "args": [ "-v=2" ], "command": [ "service-ca-operator", "controller" ], "image": "quay.io/openshift-release-dev/ocp-v4.0-art-dev@sha256:9ebfca0971d391cb2a23a5f145580bf70025653dd963e5aa93dd0a5dc9571272", "imagePullPolicy": "IfNotPresent", "name": "service-ca-controller", "ports": [ { "containerPort": 8443, "protocol": "TCP" } ], "resources": { "requests": { "cpu": "10m", "memory": "120Mi" } }, "securityContext": { "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "FallbackToLogsOnError", "volumeMounts": [ { "mountPath": "/var/run/secrets/signing-key", "name": "signing-key" }, { "mountPath": "/var/run/configmaps/signing-cabundle", "name": "signing-cabundle" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "node-role.kubernetes.io/master": "" }, "priorityClassName": "system-cluster-critical", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "service-ca", "serviceAccountName": "service-ca", "terminationGracePeriodSeconds": 30, "tolerations": [ { "effect": "NoSchedule", "key": "node-role.kubernetes.io/master", "operator": "Exists" }, { "effect": "NoExecute", "key": "node.kubernetes.io/unreachable", "operator": "Exists", "tolerationSeconds": 120 }, { "effect": "NoExecute", "key": "node.kubernetes.io/not-ready", "operator": "Exists", "tolerationSeconds": 120 } ], "volumes": [ { "name": "signing-key", "secret": { "defaultMode": 420, "secretName": "signing-key" } }, { "configMap": { "defaultMode": 420, "name": "signing-cabundle" }, "name": "signing-cabundle" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:58:37Z", "generation": 1, "labels": { "name": "rhbk-operator", "pod-template-hash": "759b8bf9b5" }, "name": "rhbk-operator-759b8bf9b5", "namespace": "rhbk-operator", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhbk-operator", "uid": "dcb39f7b-e575-43c0-96cf-95d4bde07483" } ], "resourceVersion": "42353", "uid": "153c2a66-834f-40ac-9ad8-50490e871b2f" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "name": "rhbk-operator", "pod-template-hash": "759b8bf9b5" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"k8s.keycloak.org/v2alpha1\",\n \"kind\": \"Keycloak\",\n \"metadata\": {\n \"name\": \"example-keycloak\",\n \"labels\": {\n \"app\": \"sso\"\n }\n },\n \"spec\": {\n \"instances\": 1,\n \"hostname\": {\n \"hostname\": \"example.org\"\n },\n \"http\": {\n \"tlsSecret\": \"my-tls-secret\"\n }\n }\n },\n {\n \"apiVersion\": \"k8s.keycloak.org/v2alpha1\",\n \"kind\": \"KeycloakRealmImport\",\n \"metadata\": {\n \"name\": \"example-keycloak-realm-import\",\n \"labels\": {\n \"app\": \"sso\"\n }\n },\n \"spec\": {\n \"keycloakCRName\": \"example-keycloak\",\n \"realm\": {}\n }\n }\n]", "capabilities": "Deep Insights", "categories": "Security", "certified": "false", "containerImage": "registry.redhat.io/rhbk/keycloak-rhel9-operator@sha256:27cc3e86042a74b64351e2fab9e9bbaf10c632affafc404ea96e4707dbe2ab93", "createdAt": "2026-03-26T22:02:28Z", "description": "An Operator for installing and managing Keycloak", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "true", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "olm.operatorGroup": "rhbk-operator", "olm.operatorNamespace": "rhbk-operator", "olm.targetNamespaces": "tssc-keycloak", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"k8s.keycloak.org\",\"kind\":\"Keycloak\",\"version\":\"v2alpha1\"}},{\"type\":\"olm.gvk\",\"value\":{\"group\":\"k8s.keycloak.org\",\"kind\":\"KeycloakRealmImport\",\"version\":\"v2alpha1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhbk-operator\",\"version\":\"26.4.11-opr.1\"}}]}", "operators.openshift.io/valid-subscription": "[\"OpenShift Container Platform\", \"OpenShift Platform Plus\"]", "repository": "https://github.com/keycloak/keycloak", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "name": "rhbk-operator", "pod-template-hash": "759b8bf9b5" } }, "spec": { "containers": [ { "env": [ { "name": "RELATED_IMAGE_KEYCLOAK", "value": "registry.redhat.io/rhbk/keycloak-rhel9@sha256:a8ec9cc9b21641635ffc88656680601fb8fc2bc043e57b3feff4fb0f6cc0dbc2" }, { "name": "QUARKUS_OPERATOR_SDK_CONTROLLERS_KEYCLOAKREALMIMPORTCONTROLLER_NAMESPACES", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "QUARKUS_OPERATOR_SDK_CONTROLLERS_KEYCLOAKCONTROLLER_NAMESPACES", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.annotations['olm.targetNamespaces']" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "OPERATOR_NAME", "value": "rhbk-operator" }, { "name": "OPERATOR_CONDITION_NAME", "value": "rhbk-operator.v26.4.11-opr.1" } ], "image": "registry.redhat.io/rhbk/keycloak-rhel9-operator@sha256:27cc3e86042a74b64351e2fab9e9bbaf10c632affafc404ea96e4707dbe2ab93", "imagePullPolicy": "Always", "name": "rhbk-operator", "resources": { "limits": { "cpu": "700m", "memory": "450Mi" }, "requests": { "cpu": "300m", "memory": "450Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rhbk-operator", "serviceAccountName": "rhbk-operator", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:58:50Z", "generation": 1, "labels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "f6d595f96" }, "name": "cli-server-f6d595f96", "namespace": "trusted-artifact-signer", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "cli-server", "uid": "90e121c3-6b42-4fc5-b43c-ea84de96566c" } ], "resourceVersion": "45120", "uid": "10f994b7-ad6c-40df-b481-7a2dc377c370" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "f6d595f96" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "client-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "f6d595f96" } }, "spec": { "containers": [ { "image": "registry.redhat.io/rhtas/client-server-rhel9@sha256:9607f5c16d8e9d7ee2491ac04db78a52eb13ee0e93eeef79ff8bb6c8f9430c72", "imagePullPolicy": "Always", "name": "cli-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:31Z", "generation": 1, "labels": { "pod-template-hash": "64d9d44c4d", "rhdh.redhat.com/app": "backstage-developer-hub" }, "name": "backstage-developer-hub-64d9d44c4d", "namespace": "tssc-dh", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "backstage-developer-hub", "uid": "7b6fbfc5-3048-4553-9184-295c82781aee" } ], "resourceVersion": "58334", "uid": "50f44b2d-5573-4f62-9f35-b571299f6117" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "pod-template-hash": "64d9d44c4d", "rhdh.redhat.com/app": "backstage-developer-hub" } }, "template": { "metadata": { "annotations": { "rhdh.redhat.com/ext-config-hash": "023e987531ceac39d39c87664c09dc0cb5e04a1d9c7aa975099cb02bf937d516" }, "creationTimestamp": null, "labels": { "pod-template-hash": "64d9d44c4d", "rhdh.redhat.com/app": "backstage-developer-hub" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "args": [ "--config", "dynamic-plugins-root/app-config.dynamic-plugins.yaml", "--config", "/opt/app-root/src/default.app-config.yaml", "--config", "/opt/app-root/src/app-config.tssc.yaml" ], "env": [ { "name": "APP_CONFIG_backend_listen_port", "value": "7007" } ], "envFrom": [ { "secretRef": { "name": "backstage-psql-secret-developer-hub" } }, { "secretRef": { "name": "tssc-developer-hub-env" } } ], "image": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:12a7f6cc89bf4364c038090b2b6532d90ab006444489f66a75c0d11da9f6e567", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/.backstage/health/v1/liveness", "port": "backend", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 4 }, "name": "backstage-backend", "ports": [ { "containerPort": 7007, "name": "backend", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/.backstage/health/v1/readiness", "port": "backend", "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 2, "timeoutSeconds": 4 }, "resources": { "limits": { "cpu": "4", "ephemeral-storage": "5Gi", "memory": "2560Mi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "startupProbe": { "failureThreshold": 3, "httpGet": { "path": "/.backstage/health/v1/liveness", "port": "backend", "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 4 }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/opt/app-root/src/dynamic-plugins-root", "name": "dynamic-plugins-root" }, { "mountPath": "/extensions", "name": "extensions-catalog" }, { "mountPath": "/tmp", "name": "temp" }, { "mountPath": "/opt/app-root/src/default.app-config.yaml", "name": "backstage-appconfig-developer-hub", "readOnly": true, "subPath": "default.app-config.yaml" }, { "mountPath": "/opt/app-root/src/app-config.tssc.yaml", "name": "tssc-developer-hub-app-config", "readOnly": true, "subPath": "app-config.tssc.yaml" } ], "workingDir": "/opt/app-root/src" } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "./install-dynamic-plugins.sh", "/dynamic-plugins-root" ], "env": [ { "name": "NPM_CONFIG_USERCONFIG", "value": "/opt/app-root/src/.npmrc.dynamic-plugins/.npmrc" }, { "name": "MAX_ENTRY_SIZE", "value": "30000000" }, { "name": "CATALOG_INDEX_IMAGE", "value": "registry.access.redhat.com/rhdh/plugin-catalog-index@sha256:7685bc0f28b4ae5fe41bb60bb807700be8572cc3a1d39c12cf5f82955684134c" }, { "name": "CATALOG_ENTITIES_EXTRACT_DIR", "value": "/extensions" } ], "image": "registry.redhat.io/rhdh/rhdh-hub-rhel9@sha256:12a7f6cc89bf4364c038090b2b6532d90ab006444489f66a75c0d11da9f6e567", "imagePullPolicy": "IfNotPresent", "name": "install-dynamic-plugins", "resources": { "limits": { "cpu": "1", "ephemeral-storage": "5Gi", "memory": "2560Mi" }, "requests": { "cpu": "250m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/dynamic-plugins-root", "name": "dynamic-plugins-root" }, { "mountPath": "/extensions", "name": "extensions-catalog" }, { "mountPath": "/opt/app-root/src/.config/containers", "name": "dynamic-plugins-registry-auth", "readOnly": true }, { "mountPath": "/opt/app-root/src/.npm/_cacache", "name": "npmcacache" }, { "mountPath": "/tmp", "name": "temp" }, { "mountPath": "/opt/app-root/src/.npmrc.dynamic-plugins", "name": "backstage-files-developer-hub" }, { "mountPath": "/opt/app-root/src/dynamic-plugins.yaml", "name": "backstage-dynamic-plugins-developer-hub", "readOnly": true, "subPath": "dynamic-plugins.yaml" } ], "workingDir": "/opt/app-root/src" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "dynamic-plugins-root", "persistentVolumeClaim": { "claimName": "developer-hub-dynamic-plugins-root" } }, { "name": "dynamic-plugins-registry-auth", "secret": { "defaultMode": 416, "optional": true, "secretName": "dynamic-plugins-registry-auth" } }, { "emptyDir": {}, "name": "extensions-catalog" }, { "emptyDir": {}, "name": "npmcacache" }, { "emptyDir": {}, "name": "temp" }, { "configMap": { "defaultMode": 420, "name": "backstage-appconfig-developer-hub", "optional": false }, "name": "backstage-appconfig-developer-hub" }, { "name": "backstage-files-developer-hub", "secret": { "defaultMode": 420, "optional": false, "secretName": "backstage-files-developer-hub" } }, { "configMap": { "defaultMode": 420, "name": "tssc-developer-hub-app-config", "optional": false }, "name": "tssc-developer-hub-app-config" }, { "configMap": { "defaultMode": 420, "name": "backstage-dynamic-plugins-developer-hub", "optional": false }, "name": "backstage-dynamic-plugins-developer-hub" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:08Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-applicationset-controller", "pod-template-hash": "5df5944d4d" }, "name": "tssc-gitops-applicationset-controller-5df5944d4d", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-applicationset-controller", "uid": "b96d9687-ecee-4364-80b7-f0bbd48e504d" } ], "resourceVersion": "45103", "uid": "0711f067-e5a4-4d2a-b931-b46d4ebf50ab" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-applicationset-controller", "pod-template-hash": "5df5944d4d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-applicationset-controller", "pod-template-hash": "5df5944d4d" } }, "spec": { "containers": [ { "command": [ "entrypoint.sh", "argocd-applicationset-controller", "--argocd-repo-server", "tssc-gitops-repo-server.tssc-gitops.svc.cluster.local:8081", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "argocd-applicationset-controller", "ports": [ { "containerPort": 7000, "name": "webhook", "protocol": "TCP" }, { "containerPort": 8080, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "1Gi" }, "requests": { "cpu": "125m", "memory": "512Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-applicationset-controller", "serviceAccountName": "tssc-gitops-applicationset-controller", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "2" }, "creationTimestamp": "2026-04-28T12:59:08Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "dex.config.changed": "04282026-125926-UTC", "pod-template-hash": "674d9b668f" }, "name": "tssc-gitops-dex-server-674d9b668f", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-dex-server", "uid": "7bdd76d0-d9a6-4e3b-95af-ee191712af36" } ], "resourceVersion": "45768", "uid": "3d15388a-505f-4240-8cd4-610d0d1c9ee5" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "674d9b668f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "dex.config.changed": "04282026-125926-UTC", "pod-template-hash": "674d9b668f" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-dex-server", "serviceAccountName": "tssc-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:06Z", "generation": 2, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "cb67bf45f" }, "name": "tssc-gitops-dex-server-cb67bf45f", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-dex-server", "uid": "7bdd76d0-d9a6-4e3b-95af-ee191712af36" } ], "resourceVersion": "45807", "uid": "2dc64ef1-8936-4d21-921e-ee7b4b2d72af" }, "spec": { "replicas": 0, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "cb67bf45f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-dex-server", "pod-template-hash": "cb67bf45f" } }, "spec": { "containers": [ { "command": [ "/shared/argocd-dex", "rundex" ], "image": "registry.redhat.io/openshift-gitops-1/dex-rhel9@sha256:83636e08a79df87cb99ad9b91553cb6cffd81166113c4b6952bf1d419d43e26a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz/live", "port": 5558, "scheme": "HTTP" }, "initialDelaySeconds": 60, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "dex", "ports": [ { "containerPort": 5556, "name": "http", "protocol": "TCP" }, { "containerPort": 5557, "name": "grpc", "protocol": "TCP" }, { "containerPort": 5558, "name": "metrics", "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd", "/shared/argocd-dex" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/shared", "name": "static-files" }, { "mountPath": "/tmp", "name": "dexconfig" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-dex-server", "serviceAccountName": "tssc-gitops-argocd-dex-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "static-files" }, { "emptyDir": {}, "name": "dexconfig" } ] } } }, "status": { "observedGeneration": 2, "replicas": 0 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:08Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-redis", "pod-template-hash": "9b74744d6" }, "name": "tssc-gitops-redis-9b74744d6", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-redis", "uid": "42005d09-ee41-44fa-b652-9f6044747bbd" } ], "resourceVersion": "44897", "uid": "0760a366-5714-43a8-b8a5-09bb460a8e00" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-redis", "pod-template-hash": "9b74744d6" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-redis", "pod-template-hash": "9b74744d6" } }, "spec": { "containers": [ { "args": [ "redis-server", "--protected-mode", "no", "--save", "", "--appendonly", "no", "--requirepass $(REDIS_PASSWORD)" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "tssc-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/rhel9/redis-7@sha256:3d31c0cfaf4219f5bd1c52882b603215d1cb4aaef5b8d1a128d0174e090f96f3", "imagePullPolicy": "IfNotPresent", "name": "redis", "ports": [ { "containerPort": 6379, "protocol": "TCP" } ], "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/redis/tls", "name": "argocd-operator-redis-tls" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-redis", "serviceAccountName": "tssc-gitops-argocd-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:08Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-repo-server", "pod-template-hash": "59c4d978c4" }, "name": "tssc-gitops-repo-server-59c4d978c4", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-repo-server", "uid": "0dd7c843-29f3-4976-b741-c7d923165ae3" } ], "resourceVersion": "45686", "uid": "216cf174-dee5-487f-8c00-6861f366e3f4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-repo-server", "pod-template-hash": "59c4d978c4" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-repo-server", "pod-template-hash": "59c4d978c4" } }, "spec": { "automountServiceAccountToken": false, "containers": [ { "command": [ "uid_entrypoint.sh", "argocd-repo-server", "--redis", "tssc-gitops-redis.tssc-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "tssc-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "name": "argocd-repo-server", "ports": [ { "containerPort": 8081, "name": "server", "protocol": "TCP" }, { "containerPort": 8084, "name": "metrics", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "tcpSocket": { "port": 8081 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "250m", "memory": "1Gi" }, "requests": { "cpu": "125m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/gpg/source", "name": "gpg-keys" }, { "mountPath": "/app/config/gpg/keys", "name": "gpg-keyring" }, { "mountPath": "/app/config/reposerver/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/reposerver/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd/cmp-server/plugins", "name": "plugins" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "cp", "-n", "/usr/local/bin/argocd-cmp-server", "/var/run/argocd/argocd-cmp-server" ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "name": "copyutil", "resources": { "limits": { "cpu": "250m", "memory": "1Gi" }, "requests": { "cpu": "125m", "memory": "256Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/argocd", "name": "var-files" } ] } ], "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "configMap": { "defaultMode": 420, "name": "argocd-gpg-keys-cm" }, "name": "gpg-keys" }, { "emptyDir": {}, "name": "gpg-keyring" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "var-files" }, { "emptyDir": {}, "name": "plugins" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:59:08Z", "generation": 1, "labels": { "app.kubernetes.io/name": "tssc-gitops-server", "pod-template-hash": "66784844c4" }, "name": "tssc-gitops-server-66784844c4", "namespace": "tssc-gitops", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tssc-gitops-server", "uid": "63170b91-feeb-4ded-acd1-5f04651f6363" } ], "resourceVersion": "44660", "uid": "8d880995-a514-4733-a367-d9401a64efaa" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/name": "tssc-gitops-server", "pod-template-hash": "66784844c4" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/name": "tssc-gitops-server", "pod-template-hash": "66784844c4" } }, "spec": { "containers": [ { "command": [ "argocd-server", "--staticassets", "/shared/app", "--dex-server", "https://tssc-gitops-dex-server.tssc-gitops.svc.cluster.local:5556", "--repo-server", "tssc-gitops-repo-server.tssc-gitops.svc.cluster.local:8081", "--redis", "tssc-gitops-redis.tssc-gitops.svc.cluster.local:6379", "--loglevel", "info", "--logformat", "text" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "admin.password", "name": "tssc-gitops-redis-initial-password" } } } ], "image": "registry.redhat.io/openshift-gitops-1/argocd-rhel9@sha256:3e363d14a916886709012b6715875dde87b21fb66a5a4b51367e65c8ce704f77", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "argocd-server", "ports": [ { "containerPort": 8080, "protocol": "TCP" }, { "containerPort": 8083, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 3, "periodSeconds": 30, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "250m", "memory": "256Mi" }, "requests": { "cpu": "125m", "memory": "128Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] }, "readOnlyRootFilesystem": true, "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/app/config/ssh", "name": "ssh-known-hosts" }, { "mountPath": "/app/config/tls", "name": "tls-certs" }, { "mountPath": "/app/config/server/tls", "name": "argocd-repo-server-tls" }, { "mountPath": "/app/config/server/tls/redis", "name": "argocd-operator-redis-tls" }, { "mountPath": "/home/argocd", "name": "plugins-home" }, { "mountPath": "/home/argocd/params", "name": "argocd-cmd-params-cm" }, { "mountPath": "/tmp", "name": "tmp" } ] } ], "dnsPolicy": "ClusterFirst", "nodeSelector": { "kubernetes.io/os": "linux" }, "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tssc-gitops-argocd-server", "serviceAccountName": "tssc-gitops-argocd-server", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "argocd-ssh-known-hosts-cm" }, "name": "ssh-known-hosts" }, { "configMap": { "defaultMode": 420, "name": "argocd-tls-certs-cm" }, "name": "tls-certs" }, { "name": "argocd-repo-server-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-repo-server-tls" } }, { "name": "argocd-operator-redis-tls", "secret": { "defaultMode": 420, "optional": true, "secretName": "argocd-operator-redis-tls" } }, { "emptyDir": {}, "name": "plugins-home" }, { "configMap": { "defaultMode": 420, "items": [ { "key": "server.profile.enabled", "path": "profiler.enabled" } ], "name": "argocd-cmd-params-cm", "optional": true }, "name": "argocd-cmd-params-cm" }, { "emptyDir": {}, "name": "tmp" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "app.kubernetes.io/part-of": "tssc", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "tssc-infrastructure", "meta.helm.sh/release-namespace": "tssc" }, "creationTimestamp": "2026-04-28T13:00:09Z", "generation": 1, "labels": { "app": "keycloak-pgsql-bee", "phase": "reference", "pod-template-hash": "7875bcd9bc" }, "name": "keycloak-pgsql-bee-7875bcd9bc", "namespace": "tssc-keycloak", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "keycloak-pgsql-bee", "uid": "19a5d385-12e3-49ab-a54b-45a097a22e32" } ], "resourceVersion": "49114", "uid": "abe38f0b-77b0-4cd4-acd1-a866a781b6fc" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "keycloak-pgsql-bee", "pod-template-hash": "7875bcd9bc" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "keycloak-pgsql-bee", "phase": "reference", "pod-template-hash": "7875bcd9bc" } }, "spec": { "containers": [ { "env": [ { "name": "POSTGRESQL_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "keycloak-pgsql-user" } } }, { "name": "POSTGRESQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "keycloak-pgsql-user" } } }, { "name": "POSTGRESQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "keycloak-pgsql-user" } } } ], "image": "registry.redhat.io/rhel9/postgresql-16:1-1754433677", "imagePullPolicy": "IfNotPresent", "name": "pgsql-bee", "ports": [ { "containerPort": 5432, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5432 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/pgsql/data", "name": "pgsql-storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pgsql-storage", "persistentVolumeClaim": { "claimName": "keycloak-pgsql-data" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:11Z", "generation": 1, "labels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "6545d85c66" }, "name": "ctlog-6545d85c66", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "ctlog", "uid": "bd64d5f1-da4b-41f6-97be-0731836fa400" } ], "resourceVersion": "52428", "uid": "28388d95-4731-4af1-92c3-9995aeba0f93" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "6545d85c66" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "ctlog", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "ctlog", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "6545d85c66" } }, "spec": { "containers": [ { "args": [ "--http_endpoint=0.0.0.0:6962", "--log_config=/ctfe-keys/config", "--alsologtostderr", "--max_cert_chain_size", "153600", "--tls_certificate", "/var/run/secrets/tas/tls.crt", "--tls_key", "/var/run/secrets/tas/tls.key", "--trillian_tls_ca_cert_file", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt" ], "env": [ { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/certificate-transparency-rhel9@sha256:95b5aefafd17dd44794f6d5d1e75278faa5a74f2472db667409d1c88caaef1f1", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6962, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "ctlog", "ports": [ { "containerPort": 6962, "name": "server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 6962, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/ctfe-keys", "name": "keys", "readOnly": true }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "ctlog", "serviceAccountName": "ctlog", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "keys", "secret": { "defaultMode": 420, "secretName": "ctlog-config-trusted-artifact-signerqnnqd" } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-ctlog-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-ctlog-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:00Z", "generation": 1, "labels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7d456f4f5b" }, "name": "fulcio-server-7d456f4f5b", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "fulcio-server", "uid": "185cff36-c233-4b49-84db-1d9c63938129" } ], "resourceVersion": "50581", "uid": "220e786f-8848-4dce-bc35-9ce641dd8e8d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7d456f4f5b" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "fulcio", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "fulcio-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7d456f4f5b" } }, "spec": { "automountServiceAccountToken": true, "containers": [ { "args": [ "serve", "--port=5555", "--grpc-port=5554", "--log_type=prod", "--ca=fileca", "--fileca-key", "/var/run/fulcio-secrets/key.pem", "--fileca-cert", "/var/run/fulcio-secrets/cert.pem", "--ct-log-url=https://ctlog.tssc-tas.svc/trusted-artifact-signer", "--fileca-key-passwd", "$(PASSWORD)" ], "env": [ { "name": "PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "fulcio-cert-trusted-artifact-signer4hmkg" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/fulcio-rhel9@sha256:2d478c389bc89afc6b331bc662a84dfc1bbb9da2681ab6dc5ad36f44c346699a", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5555, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "fulcio-server", "ports": [ { "containerPort": 5555, "name": "http", "protocol": "TCP" }, { "containerPort": 5554, "name": "grpc", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 5555, "scheme": "HTTP" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/fulcio-secrets", "name": "fulcio-cert", "readOnly": true }, { "mountPath": "/etc/fulcio-config", "name": "fulcio-config" }, { "mountPath": "/var/run/fulcio", "name": "oidc-info" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "fulcio", "serviceAccountName": "fulcio", "terminationGracePeriodSeconds": 30, "volumes": [ { "configMap": { "defaultMode": 420, "name": "fulcio-config-w8tc4" }, "name": "fulcio-config" }, { "name": "fulcio-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "private", "path": "key.pem" } ], "name": "fulcio-cert-trusted-artifact-signer4hmkg" } }, { "secret": { "items": [ { "key": "cert", "path": "cert.pem" } ], "name": "fulcio-cert-trusted-artifact-signer4hmkg" } } ] } }, { "name": "oidc-info", "projected": { "defaultMode": 420, "sources": [ { "configMap": { "items": [ { "key": "ca.crt", "mode": 438, "path": "ca.crt" } ], "name": "kube-root-ca.crt" } } ] } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:02Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "699dfdd6d" }, "name": "rekor-redis-699dfdd6d", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-redis", "uid": "e48c58f4-c6d2-4466-aac2-1c36e66880bd" } ], "resourceVersion": "51896", "uid": "5b95f6e9-fef4-4538-b45d-272d0a4dac42" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "699dfdd6d" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-redis", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-redis", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "699dfdd6d" } }, "spec": { "containers": [ { "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "redis-password-trusted-artifact-signerxwkhc" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" }, { "name": "REDIS_CONF", "value": "/config/redis.conf" } ], "image": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "/bin/sh", "-c", "-i", "test $(redis-cli --tls --cacert /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -h 127.0.0.1 -a $REDIS_PASSWORD ping) = 'PONG'" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "rekor-redis", "ports": [ { "containerPort": 6379, "name": "redis", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "/bin/sh", "-c", "-i", "test $(redis-cli --tls --cacert /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt -h 127.0.0.1 -a $REDIS_PASSWORD ping) = 'PONG'" ] }, "failureThreshold": 3, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data", "name": "storage" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true }, { "mountPath": "/config", "name": "config" } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "args": [ "cp $REDIS_CONF /config/redis.conf\necho \"tls-port 6379\" \u003e\u003e /config/redis.conf\necho \"port 0\" \u003e\u003e /config/redis.conf\necho \"tls-cert-file /var/run/secrets/tas/tls.crt\" \u003e\u003e /config/redis.conf\necho \"tls-key-file /var/run/secrets/tas/tls.key\" \u003e\u003e /config/redis.conf\necho \"tls-ca-cert-file /var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt\" \u003e\u003e /config/redis.conf\necho \"tls-auth-clients no\" \u003e\u003e /config/redis.conf\n" ], "command": [ "/bin/bash", "-c" ], "image": "registry.redhat.io/rhtas/trillian-redis-rhel9@sha256:22b8cfd123fdd66827b81f2431903198e33579906102b2f6295276cf3eb197a6", "imagePullPolicy": "IfNotPresent", "name": "enable-tls", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/config", "name": "config" } ] } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rekor-redis", "serviceAccountName": "rekor-redis", "terminationGracePeriodSeconds": 30, "volumes": [ { "emptyDir": {}, "name": "storage" }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-rekor-redis-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-rekor-redis-tls" } } ] } }, { "emptyDir": {}, "name": "config" } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:02Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "94997b5f7" }, "name": "rekor-search-ui-94997b5f7", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-search-ui", "uid": "888d05af-c8e0-4f79-8579-01255c8cc9e5" } ], "resourceVersion": "52145", "uid": "bf638579-b1c1-41e5-b460-4e88103c8da4" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "94997b5f7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-ui", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-search-ui", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "94997b5f7" } }, "spec": { "containers": [ { "env": [ { "name": "NEXT_PUBLIC_REKOR_DEFAULT_DOMAIN", "value": "https://rekor-server-tssc-tas.apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com" } ], "image": "registry.redhat.io/rhtas/rekor-search-ui-rhel9@sha256:204dc28f6182267851d39eff08649e921877e2771d2c39acb798aa7896f5bcef", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "name": "rekor-search-ui", "ports": [ { "containerPort": 3000, "name": "3000-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "rekor-ui", "serviceAccountName": "rekor-ui", "terminationGracePeriodSeconds": 30 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:04:02Z", "generation": 1, "labels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "558b7894d5" }, "name": "rekor-server-558b7894d5", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rekor-server", "uid": "27d9f205-d4ac-4c37-80f6-d0695156f170" } ], "resourceVersion": "52528", "uid": "d440d819-fe64-4ea8-bfd8-b1004c3c8cf9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "558b7894d5" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "rekor-server", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "rekor-server", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "558b7894d5" } }, "spec": { "containers": [ { "args": [ "serve", "--trillian_log_server.address", "trillian-logserver.tssc-tas.svc", "--trillian_log_server.port", "8091", "--trillian_log_server.sharding_config", "/sharding/sharding-config.yaml", "--rekor_server.address", "0.0.0.0", "--enable_retrieve_api=true", "--trillian_log_server.tlog_id", "8798692339187228117", "--log_type", "prod", "--rekor_server.signer", "/key/private", "--max_request_body_size", "10485760", "--search_index.storage_provider", "redis", "--redis_server.address", "rekor-redis.tssc-tas.svc", "--redis_server.port", "6379", "--redis_server.password", "$(REDIS_PASSWORD)", "--redis_server.enable-tls=true", "--enable_attestation_storage=true", "--attestation_storage_bucket", "file:///var/run/attestations?no_tmp_dir=true", "--max_attestation_size", "102400", "--trillian_log_server.tls=true" ], "env": [ { "name": "REDIS_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "redis-password-trusted-artifact-signerxwkhc" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/rekor-server-rhel9@sha256:b4a5a2c2518dba5f7812c8b4112e25a0f867a4b187c23adfc727395f871c8ca6", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ping", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "rekor-server", "ports": [ { "containerPort": 3000, "name": "rekor-server", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/ping", "port": 3000, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/key", "name": "rekor-private-key-volume", "readOnly": true }, { "mountPath": "/sharding", "name": "rekor-sharding-config" }, { "mountPath": "/var/run/attestations", "name": "storage" }, { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "rekor", "serviceAccountName": "rekor", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "rekor-private-key-volume", "secret": { "defaultMode": 420, "items": [ { "key": "private", "path": "private" } ], "secretName": "rekor-signer-trusted-artifact-signer-5qjlt" } }, { "configMap": { "defaultMode": 420, "name": "rekor-sharding-config-rgwqf" }, "name": "rekor-sharding-config" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "rekor-trusted-artifact-signer-pvc" } }, { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:00Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "67dc986b79" }, "name": "trillian-db-67dc986b79", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-db", "uid": "1bd527fe-9131-4f01-bce5-d560c50a4738" } ], "resourceVersion": "50702", "uid": "f5e99abe-14ca-478b-b28f-49f410957d38" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "67dc986b79" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-db", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-db", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "67dc986b79" } }, "spec": { "containers": [ { "args": [ "--ssl-cert", "/var/run/secrets/tas/tls.crt", "--ssl-key", "/var/run/secrets/tas/tls.key" ], "command": [ "run-mysqld" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_ROOT_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-root-password", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-2rrhf" } } } ], "image": "registry.redhat.io/rhtas/trillian-database-rhel9@sha256:ab5c3e921b58d17bf6b596d2d7acf64a28b34f3f3a66720c1a07e6555ed9e0b8", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "bash", "-c", "mariadb-admin -u ${MYSQL_USER} -p${MYSQL_PASSWORD} ping --ssl" ] }, "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-db", "ports": [ { "containerPort": 3306, "name": "3306-tcp", "protocol": "TCP" } ], "readinessProbe": { "exec": { "command": [ "bash", "-c", "mariadb -u ${MYSQL_USER} -p${MYSQL_PASSWORD} -e \"SELECT 1;\" --ssl" ] }, "failureThreshold": 3, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/mysql", "name": "storage" }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "trillian-db", "serviceAccountName": "trillian-db", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "storage", "persistentVolumeClaim": { "claimName": "trillian-mysql" } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-db-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-db-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:01Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "55695f77b4" }, "name": "trillian-logserver-55695f77b4", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-logserver", "uid": "82fd3dcd-8fa8-4716-8144-39a12cce1468" } ], "resourceVersion": "50964", "uid": "e24e7206-bdcf-489a-abb9-7c242f6e122d" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "55695f77b4" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-logserver", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logserver", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "55695f77b4" } }, "spec": { "containers": [ { "args": [ "--storage_system=mysql", "--quota_system=mysql", "--mysql_uri=$(MYSQL_USER):$(MYSQL_PASSWORD)@tcp($(MYSQL_HOSTNAME):$(MYSQL_PORT))/$(MYSQL_DATABASE)", "--mysql_max_conns=30", "--mysql_max_idle_conns=10", "--rpc_endpoint=0.0.0.0:8091", "--http_endpoint=0.0.0.0:8090", "--alsologtostderr", "--max_msg_size_bytes", "153600", "--mysql_tls_ca", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt", "--mysql_server_name", "$(MYSQL_HOSTNAME).tssc-tas.svc", "--tls_cert_file", "/var/run/secrets/tas/tls.crt", "--tls_key_file", "/var/run/secrets/tas/tls.key" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-2rrhf" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/trillian-logserver-rhel9@sha256:523fa259ebf067ac3076748d4f5c86e01e5b1960034c0876add5d67b0ca21b0b", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-logserver", "ports": [ { "containerPort": 8091, "name": "8091-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "until nc -z -v -w30 $MYSQL_HOSTNAME $MYSQL_PORT; do echo \"Waiting for MySQL to start\"; sleep 5; done;" ], "env": [ { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-2rrhf" } } } ], "image": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1", "imagePullPolicy": "IfNotPresent", "name": "wait-for-trillian-db", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trillian-logserver", "serviceAccountName": "trillian-logserver", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-logserver-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-logserver-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:03:01Z", "generation": 1, "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7565f8746c" }, "name": "trillian-logsigner-7565f8746c", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "trillian-logsigner", "uid": "55a25b40-bacb-4d49-8597-40896d069e16" } ], "resourceVersion": "50971", "uid": "a9f87cd4-aac7-41c3-89b2-26aca960db38" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7565f8746c" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "trillian-logsigner", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "trillian-logsigner", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "7565f8746c" } }, "spec": { "containers": [ { "args": [ "--storage_system=mysql", "--quota_system=mysql", "--mysql_uri=$(MYSQL_USER):$(MYSQL_PASSWORD)@tcp($(MYSQL_HOSTNAME):$(MYSQL_PORT))/$(MYSQL_DATABASE)", "--mysql_max_conns=30", "--mysql_max_idle_conns=10", "--rpc_endpoint=0.0.0.0:8091", "--http_endpoint=0.0.0.0:8090", "--alsologtostderr", "--election_system=k8s", "--lock_namespace=$(NAMESPACE)", "--lock_holder_identity=$(POD_NAME)", "--master_hold_interval=5s", "--master_hold_jitter=15s", "--max_msg_size_bytes", "153600", "--mysql_tls_ca", "/var/run/secrets/kubernetes.io/serviceaccount/service-ca.crt", "--mysql_server_name", "$(MYSQL_HOSTNAME).tssc-tas.svc", "--tls_cert_file", "/var/run/secrets/tas/tls.crt", "--tls_key_file", "/var/run/secrets/tas/tls.key" ], "env": [ { "name": "MYSQL_USER", "valueFrom": { "secretKeyRef": { "key": "mysql-user", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "mysql-password", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "mysql-database", "name": "trillian-db-connection-2rrhf" } } }, { "name": "POD_NAME", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.name" } } }, { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "SSL_CERT_DIR", "value": "/var/run/configs/tas/ca-trust:/var/run/secrets/kubernetes.io/serviceaccount" } ], "image": "registry.redhat.io/rhtas/trillian-logsigner-rhel9@sha256:f211db01228530de8ed46b05189c492e6c3629df1098da57d31f2765a22ef014", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "trillian-logsigner", "ports": [ { "containerPort": 8091, "name": "8091-tcp", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8090, "scheme": "HTTPS" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/run/configs/tas/ca-trust", "name": "ca-trust", "readOnly": true }, { "mountPath": "/var/run/secrets/tas", "name": "tls-cert", "readOnly": true } ] } ], "dnsPolicy": "ClusterFirst", "initContainers": [ { "command": [ "sh", "-c", "until nc -z -v -w30 $MYSQL_HOSTNAME $MYSQL_PORT; do echo \"Waiting for MySQL to start\"; sleep 5; done;" ], "env": [ { "name": "MYSQL_HOSTNAME", "valueFrom": { "secretKeyRef": { "key": "mysql-host", "name": "trillian-db-connection-2rrhf" } } }, { "name": "MYSQL_PORT", "valueFrom": { "secretKeyRef": { "key": "mysql-port", "name": "trillian-db-connection-2rrhf" } } } ], "image": "registry.redhat.io/openshift4/ose-tools-rhel9@sha256:15692e0deea2ee5ef374514639030317a5b033c1bd1778673329a9745feb41d1", "imagePullPolicy": "IfNotPresent", "name": "wait-for-trillian-db", "resources": {}, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "serviceAccount": "trillian-logsigner", "serviceAccountName": "trillian-logsigner", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "ca-trust", "projected": { "defaultMode": 420, "sources": null } }, { "name": "tls-cert", "projected": { "defaultMode": 420, "sources": [ { "secret": { "items": [ { "key": "tls.crt", "path": "tls.crt" } ], "name": "trusted-artifact-signer-trillian-logsigner-tls" } }, { "secret": { "items": [ { "key": "tls.key", "path": "tls.key" } ], "name": "trusted-artifact-signer-trillian-logsigner-tls" } } ] } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "1", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T13:05:00Z", "generation": 1, "labels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "b4d8f6d89" }, "name": "tuf-b4d8f6d89", "namespace": "tssc-tas", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tuf", "uid": "f0048d60-32c9-4fe2-bee9-bcb77423fabf" } ], "resourceVersion": "54455", "uid": "82d1c318-4fc6-4734-b1b3-36385d8d2fd9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "b4d8f6d89" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "tuf", "app.kubernetes.io/instance": "trusted-artifact-signer", "app.kubernetes.io/managed-by": "controller-manager", "app.kubernetes.io/name": "tuf", "app.kubernetes.io/part-of": "trusted-artifact-signer", "pod-template-hash": "b4d8f6d89" } }, "spec": { "containers": [ { "image": "registry.redhat.io/ubi9/httpd-24@sha256:7a48172cdda2a565001998fac2f3aeaa65677f080dd9cb3f9e26ef0963afdef0", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "exec": { "command": [ "curl", "localhost:8080" ] }, "failureThreshold": 3, "initialDelaySeconds": 30, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "tuf-server", "ports": [ { "containerPort": 8080, "name": "http", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/root.json", "port": 8080, "scheme": "HTTP" }, "initialDelaySeconds": 10, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 5 }, "resources": {}, "securityContext": { "allowPrivilegeEscalation": false, "runAsNonRoot": true }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/www/html", "name": "repository" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "fsGroupChangePolicy": "OnRootMismatch", "runAsNonRoot": true, "seccompProfile": { "type": "RuntimeDefault" } }, "serviceAccount": "tuf", "serviceAccountName": "tuf", "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "repository", "persistentVolumeClaim": { "claimName": "tuf" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "trustedprofileanalyzer", "meta.helm.sh/release-namespace": "tssc-tpa" }, "creationTimestamp": "2026-04-28T13:04:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "85dc587b5f" }, "name": "importer-85dc587b5f", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "importer", "uid": "1c5d39c9-409d-4d70-9ca9-fbe127f47631" } ], "resourceVersion": "53654", "uid": "74799223-e8f0-4a8e-bb34-52fdc0620487" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "85dc587b5f" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "importer", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "importer", "pod-template-hash": "85dc587b5f" } }, "spec": { "affinity": { "podAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "importer", "--working-dir", "/data/workdir", "--concurrency", "1" ], "command": [ "/usr/local/bin/trustd" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RUST_LOG", "value": "debug" }, { "name": "RUST_BACKTRACE", "value": "1" }, { "name": "INFRASTRUCTURE_ENABLED", "value": "true" }, { "name": "INFRASTRUCTURE_BIND", "value": "[::]:9010" }, { "name": "TRUSTD_DB_HOST", "valueFrom": { "secretKeyRef": { "key": "host", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PORT", "valueFrom": { "secretKeyRef": { "key": "port", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_NAME", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_SSLMODE", "value": "disable" }, { "name": "TRUSTD_STORAGE_STRATEGY", "value": "fs" }, { "name": "TRUSTD_STORAGE_FS_PATH", "value": "/data/storage" } ], "image": "registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9@sha256:c1fd3736f86667698e06b4b2fed5407867dd89dbe53f8e97a9aa23a87ce12909", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/live", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "service", "ports": [ { "containerPort": 9010, "name": "infra", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/ready", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1", "memory": "8Gi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/data/workdir", "name": "workdir" }, { "mountPath": "/data/storage", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "ephemeral": { "volumeClaimTemplate": { "metadata": { "creationTimestamp": null, "labels": { "type": "importer-working-directory" } }, "spec": { "accessModes": [ "ReadWriteOnce" ], "resources": { "requests": { "storage": "32Gi" } }, "volumeMode": "Filesystem" } } }, "name": "workdir" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "storage" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1" }, "creationTimestamp": "2026-04-28T12:58:29Z", "generation": 1, "labels": { "control-plane": "controller-manager", "pod-template-hash": "556f86dcbc" }, "name": "rhtpa-operator-controller-manager-556f86dcbc", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "rhtpa-operator-controller-manager", "uid": "23c93502-5155-4b08-86d4-fc4927cee464" } ], "resourceVersion": "42523", "uid": "c62a9097-22df-4e3c-b171-f1a411831bc9" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "control-plane": "controller-manager", "pod-template-hash": "556f86dcbc" } }, "template": { "metadata": { "annotations": { "alm-examples": "[\n {\n \"apiVersion\": \"rhtpa.io/v1\",\n \"kind\": \"TrustedProfileAnalyzer\",\n \"metadata\": {\n \"name\": \"trustedprofileanalyzer-sample\"\n },\n \"spec\": {\n \"appDomain\": \"change-me\",\n \"collector\": {},\n \"database\": {},\n \"image\": {},\n \"infrastructure\": {\n \"port\": 9010\n },\n \"ingress\": {},\n \"metrics\": {\n \"enabled\": false\n },\n \"modules\": {\n \"createDatabase\": {\n \"enabled\": false,\n \"image\": {}\n },\n \"createImporters\": {\n \"enabled\": false,\n \"image\": {},\n \"importers\": {}\n },\n \"importer\": {\n \"concurrency\": 1,\n \"enabled\": true,\n \"image\": {},\n \"infrastructure\": {},\n \"metrics\": {},\n \"replicas\": 1,\n \"resources\": {\n \"requests\": {\n \"cpu\": 1,\n \"memory\": \"8Gi\"\n }\n },\n \"rust\": {},\n \"tracing\": {},\n \"workingDirectory\": {\n \"size\": \"32Gi\"\n }\n },\n \"migrateDatabase\": {\n \"enabled\": false,\n \"image\": {}\n },\n \"server\": {\n \"enabled\": true,\n \"image\": {},\n \"infrastructure\": {},\n \"ingress\": {},\n \"metrics\": {},\n \"replicas\": 1,\n \"resources\": {\n \"requests\": {\n \"cpu\": 1,\n \"memory\": \"8Gi\"\n }\n },\n \"rust\": {},\n \"tracing\": {}\n }\n },\n \"oidc\": {\n \"clients\": {\n \"cli\": {\n \"clientSecret\": null\n },\n \"frontend\": {}\n }\n },\n \"openshift\": {\n \"useServiceCa\": true\n },\n \"partOf\": \"trustify\",\n \"replicas\": 1,\n \"rust\": {},\n \"storage\": {},\n \"tls\": {},\n \"tracing\": {\n \"enabled\": false\n }\n }\n }\n]", "capabilities": "Basic Install", "createdAt": "2025-11-04T12:03:15Z", "features.operators.openshift.io/cnf": "false", "features.operators.openshift.io/cni": "false", "features.operators.openshift.io/csi": "false", "features.operators.openshift.io/disconnected": "false", "features.operators.openshift.io/fips-compliant": "false", "features.operators.openshift.io/proxy-aware": "false", "features.operators.openshift.io/tls-profiles": "false", "features.operators.openshift.io/token-auth-aws": "false", "features.operators.openshift.io/token-auth-azure": "false", "features.operators.openshift.io/token-auth-gcp": "false", "kubectl.kubernetes.io/default-container": "manager", "olm.operatorGroup": "rhtpa-operator", "olm.operatorNamespace": "tssc-tpa", "olm.targetNamespaces": "tssc-tpa", "operatorframework.io/properties": "{\"properties\":[{\"type\":\"olm.gvk\",\"value\":{\"group\":\"rhtpa.io\",\"kind\":\"TrustedProfileAnalyzer\",\"version\":\"v1\"}},{\"type\":\"olm.package\",\"value\":{\"packageName\":\"rhtpa-operator\",\"version\":\"1.1.4\"}}]}", "operators.openshift.io/valid-subscription": "[\"Red Hat Trusted Profile Analyzer\"]", "operators.operatorframework.io/builder": "operator-sdk-v1.42.0", "operators.operatorframework.io/project_layout": "helm.sdk.operatorframework.io/v1", "repository": "https://github.com/trustification/trusted-profile-analyzer-operator", "support": "Red Hat" }, "creationTimestamp": null, "labels": { "control-plane": "controller-manager", "pod-template-hash": "556f86dcbc" } }, "spec": { "containers": [ { "args": [ "--metrics-bind-address=:8443", "--leader-elect", "--health-probe-bind-address=:8081" ], "env": [ { "name": "OPERATOR_CONDITION_NAME", "value": "rhtpa-operator.v1.1.4" } ], "image": "registry.redhat.io/rhtpa/rhtpa-rhel9-operator@sha256:95f5dcecd4c2f488420d608565bcac75909a65f2c9d443c34d93f7914f1cb1ef", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/healthz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "manager", "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/readyz", "port": 8081, "scheme": "HTTP" }, "initialDelaySeconds": 5, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "500m", "memory": "256Mi" }, "requests": { "cpu": "10m", "memory": "64Mi" } }, "securityContext": { "allowPrivilegeEscalation": false, "capabilities": { "drop": [ "ALL" ] } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File" } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "serviceAccount": "rhtpa-operator-controller-manager", "serviceAccountName": "rhtpa-operator-controller-manager", "terminationGracePeriodSeconds": 10 } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "trustedprofileanalyzer", "meta.helm.sh/release-namespace": "tssc-tpa" }, "creationTimestamp": "2026-04-28T13:04:56Z", "generation": 1, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "7475b79495" }, "name": "server-7475b79495", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "server", "uid": "a013f98a-e47e-441c-bdaa-7521b87842e6" } ], "resourceVersion": "53613", "uid": "ceff880f-9677-4e7d-af97-1d504920eace" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "7475b79495" } }, "template": { "metadata": { "annotations": { "configHash/auth": "74d3b94def91b1d8bd44f210efcadb12aa75d4b0d7d6121cea9cfe9dfca16eee" }, "creationTimestamp": null, "labels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server", "pod-template-hash": "7475b79495" } }, "spec": { "affinity": { "podAffinity": { "requiredDuringSchedulingIgnoredDuringExecution": [ { "labelSelector": { "matchLabels": { "app.kubernetes.io/component": "server", "app.kubernetes.io/instance": "trustedprofileanalyzer", "app.kubernetes.io/name": "server" } }, "topologyKey": "kubernetes.io/hostname" } ] } }, "containers": [ { "args": [ "api", "--auth-configuration", "/etc/config/auth.yaml" ], "command": [ "/usr/local/bin/trustd" ], "env": [ { "name": "NAMESPACE", "valueFrom": { "fieldRef": { "apiVersion": "v1", "fieldPath": "metadata.namespace" } } }, { "name": "RUST_LOG", "value": "debug" }, { "name": "RUST_BACKTRACE", "value": "1" }, { "name": "INFRASTRUCTURE_ENABLED", "value": "true" }, { "name": "INFRASTRUCTURE_BIND", "value": "[::]:9010" }, { "name": "HTTP_SERVER_BIND_ADDR", "value": "::" }, { "name": "HTTP_SERVER_TLS_ENABLED", "value": "true" }, { "name": "HTTP_SERVER_TLS_KEY_FILE", "value": "/etc/tls/tls.key" }, { "name": "HTTP_SERVER_TLS_CERTIFICATE_FILE", "value": "/etc/tls/tls.crt" }, { "name": "TRUSTD_DB_HOST", "valueFrom": { "secretKeyRef": { "key": "host", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PORT", "valueFrom": { "secretKeyRef": { "key": "port", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_NAME", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "TRUSTD_DB_SSLMODE", "value": "disable" }, { "name": "TRUSTD_STORAGE_STRATEGY", "value": "fs" }, { "name": "TRUSTD_STORAGE_FS_PATH", "value": "/data/storage" }, { "name": "SWAGGER_UI_OIDC_ISSUER_URL", "value": "https://tssc-sso.apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com/realms/tssc-iam" }, { "name": "SWAGGER_UI_OIDC_CLIENT_ID", "value": "frontend" }, { "name": "SWAGGER_UI_OIDC_TLS_CA_CERTIFICATES", "value": "/var/run/secrets/kubernetes.io/serviceaccount/ca.crt" }, { "name": "UI_ISSUER_URL", "value": "https://tssc-sso.apps.clusterpool418-bb45f.rhtap.devcluster.openshift.com/realms/tssc-iam" }, { "name": "UI_CLIENT_ID", "value": "frontend" }, { "name": "UI_LOAD_USER", "value": "true" } ], "image": "registry.redhat.io/rhtpa/rhtpa-trustification-service-rhel9@sha256:c1fd3736f86667698e06b4b2fed5407867dd89dbe53f8e97a9aa23a87ce12909", "imagePullPolicy": "IfNotPresent", "livenessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/live", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "name": "service", "ports": [ { "containerPort": 9010, "name": "infra", "protocol": "TCP" }, { "containerPort": 8080, "name": "endpoint", "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "httpGet": { "path": "/health/ready", "port": 9010, "scheme": "HTTP" }, "initialDelaySeconds": 2, "periodSeconds": 10, "successThreshold": 1, "timeoutSeconds": 1 }, "resources": { "requests": { "cpu": "1", "memory": "8Gi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/etc/tls", "name": "tls", "readOnly": true }, { "mountPath": "/etc/config/auth.yaml", "name": "config-auth", "subPath": "auth.yaml" }, { "mountPath": "/data/storage", "name": "storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": {}, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "tls", "secret": { "defaultMode": 420, "secretName": "server-tls" } }, { "configMap": { "defaultMode": 420, "name": "server-auth" }, "name": "config-auth" }, { "name": "storage", "persistentVolumeClaim": { "claimName": "storage" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } }, { "apiVersion": "apps/v1", "kind": "ReplicaSet", "metadata": { "annotations": { "app.kubernetes.io/part-of": "tssc", "deployment.kubernetes.io/desired-replicas": "1", "deployment.kubernetes.io/max-replicas": "2", "deployment.kubernetes.io/revision": "1", "meta.helm.sh/release-name": "tssc-infrastructure", "meta.helm.sh/release-namespace": "tssc" }, "creationTimestamp": "2026-04-28T13:00:09Z", "generation": 1, "labels": { "app": "tpa-pgsql-bee", "phase": "reference", "pod-template-hash": "7c6bf4d9f7" }, "name": "tpa-pgsql-bee-7c6bf4d9f7", "namespace": "tssc-tpa", "ownerReferences": [ { "apiVersion": "apps/v1", "blockOwnerDeletion": true, "controller": true, "kind": "Deployment", "name": "tpa-pgsql-bee", "uid": "77244eda-83cb-4996-b4ce-61f1b4998493" } ], "resourceVersion": "49106", "uid": "378e310a-7677-4049-a8c8-abd36e783fbc" }, "spec": { "replicas": 1, "selector": { "matchLabels": { "app": "tpa-pgsql-bee", "pod-template-hash": "7c6bf4d9f7" } }, "template": { "metadata": { "creationTimestamp": null, "labels": { "app": "tpa-pgsql-bee", "phase": "reference", "pod-template-hash": "7c6bf4d9f7" } }, "spec": { "containers": [ { "env": [ { "name": "POSTGRESQL_USER", "valueFrom": { "secretKeyRef": { "key": "user", "name": "tpa-pgsql-user" } } }, { "name": "POSTGRESQL_PASSWORD", "valueFrom": { "secretKeyRef": { "key": "password", "name": "tpa-pgsql-user" } } }, { "name": "POSTGRESQL_DATABASE", "valueFrom": { "secretKeyRef": { "key": "dbname", "name": "tpa-pgsql-user" } } } ], "image": "registry.redhat.io/rhel9/postgresql-16:1-1754433677", "imagePullPolicy": "IfNotPresent", "name": "pgsql-bee", "ports": [ { "containerPort": 5432, "protocol": "TCP" } ], "readinessProbe": { "failureThreshold": 3, "initialDelaySeconds": 15, "periodSeconds": 20, "successThreshold": 1, "tcpSocket": { "port": 5432 }, "timeoutSeconds": 1 }, "resources": { "limits": { "cpu": "1", "memory": "1Gi" }, "requests": { "cpu": "250m", "memory": "512Mi" } }, "terminationMessagePath": "/dev/termination-log", "terminationMessagePolicy": "File", "volumeMounts": [ { "mountPath": "/var/lib/pgsql/data", "name": "pgsql-storage" } ] } ], "dnsPolicy": "ClusterFirst", "restartPolicy": "Always", "schedulerName": "default-scheduler", "securityContext": { "runAsNonRoot": true }, "terminationGracePeriodSeconds": 30, "volumes": [ { "name": "pgsql-storage", "persistentVolumeClaim": { "claimName": "tpa-pgsql-data" } } ] } } }, "status": { "availableReplicas": 1, "fullyLabeledReplicas": 1, "observedGeneration": 1, "readyReplicas": 1, "replicas": 1 } } ], "kind": "List", "metadata": { "resourceVersion": "" } }